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(57) A method and apparatus relating to a receiver/ 
decoder in a digital television environment, including 
logical devices (including logical demultiplexer devices) 
for representing physical and other devices in the re- 
ceiver/decoder. The method includes the instantiation 
of devices by the receiver/decoder as required to sup- 
port functionality thereof. The method further includes 
the use of multiple demultiplexers/remultiplexers : for ex- 
ample in the recording of more than one service simul- 
taneously; and a control word device for the manage- 
ment of control word operations; the use of two or more 
tuners. 

Various elements of a digital television system 
(such as a receiver/decoder and a set top box) are also 
disclosed. 
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Description 

[0001] The invention relates to methods and appara- 
tus for use in or with a receiver/decoder, and may in- 
clude a receiver/decoder, a broadcast system, a com- 5 
puter program product, a computer readable medium 
having stored thereon a computer program product and/ 
or a signal tangibly embodying a computer program 
product. The invention finds particular application in 
supporting one or more functions of the receiver/decod- 10 
er. 

[0002] Embodiments of the invention may support for 
instance communication and/or control between soft- 
ware applications and supporting devices in a receiver/ 
decoder, and/or performance of a security process in ac- 15 
cessing one or more data streams at the receiver/de- 
coder. 

[0003] Digital television systems transmit television 
channels to the viewer in digital, rather than analogue, 
form. The digital channels are encoded into a digital data 20 
stream at the transmitter end, and are decoded at the 
receiver end using a digital receiver/decoder To allow 
interactivity, an uplink may be provided, either via the 
same medium that delivers the television channels, or 
else via a different medium such as a telephone link. 25 
Further types of data, such as digital audio, software and 
interactive data can be or are also broadcast. As used 
herein, the term "digital television system- includes for 
example any satellite, terrestrial, cable and other sys- 
tem. 30 
[0004] The term "receiver/decoder" as used herein 
may connote a receiver for receiving either encoded or 
non-encoded signals, for example television and/or ra- 
dio signals, preferably in MPEG format, which may be 
broadcast or transmitted by some other means. The 35 
term may also connote a decoder for decoding received 
signals. Embodiments of such receiver/decoders may 
include a decoder integral with the receiver for decoding 
the received signals, for example, in a "set-top box", 
such as a decoder functioning in combination with a *o 
physically separate receiver, or such a decoder includ- 
ing additional functions, such as a web browser, a video 
recorder, or a television. 

[0005] The term MPEG refers to the data transmis- 
sion standards developed by the International Stand- 45 
ards Organisation working group "Motion Pictures Ex- 
pert Group" and in particular but not exclusively the 
MPEG-2 standard developed for digital television appli- 
cations and set out in the documents ISO 1 381 8-1 , ISO 
13818-2, ISO 13818-3 and ISO 13818-4. In the context so 
of the present patent application, the term includes all 
variants, modifications or developments of MPEG for- 
mats applicable to the field of digital data transmission. 
[0006] Signals received by a receiver/decoder may be 
dealt with in different ways. For instance, they may be 55 
played as they are received, or recorded for later play- 
back. Incoming signals to a receiver/decoder may also 
be scrambled, particularly in the case of broadcast dig- 



ital television systems since users may have to pay for 
receiving selected channels or programmes and scram- 
bling can be used as a way of preventing unauthorised 
access. The receiver/decoder may also therefore pro- 
vide a descrambling function and equipment of a rele- 
vant type is sometimes called an Integrated Receiver/ 
Descrambler(IRD). 

[0007] Known digital receivers/decoders are effec- 
tively based on a computer type architecture, having an 
associated hardware/software platform, an operating 
system and software applications. For instance, in a 
known form of receiver/decoder, there are provided: 

• software applications for user interaction and for 
controlling functionality of the receiver/decoder 

• hardware and software devices for carrying out 
functions in use of the receiver/decoder, such as re- 
ceiving, decoding and descrambling incoming sig- 
nals and running the machine itself in terms of pro- 
viding an LED display, clock and so forth 

• middleware such as interpreters for enabling appli- 
cations to be developed separately from, but to in- 
teract with, the devices. 

[0008] These three aspects are generally supported 
by an operating system of the equipment in which they 
are installed. 

[0009] In computing technology, an Application Pro- 
gramming Interface (API) usually comprises or includes 
the set of function calls and services that a program 
makes available to other processes. Each function or 
service has a set format which specifies values which 
must be supplied, and which will be returned, in use of 
the function or service and the API sets these out. The 
addition of the middleware layer mentioned above in a 
receiver/decoder, together with an API, means that ap- 
plications become portable. That is, they can be reused 
on different receiver/decoders, having different soft- 
ware/hardware platforms, which is clearly beneficial, as 
long as the applications and middleware conform to the 
same API. It also means that users can download ap- 
plications from different sources onto an existing receiv- 
er/decoder platform. 

[0010] One further feature which has been developed 
in a known receiver/decoder is a device layer interface 
(DLI), sometimes referred to simply as a Device Layer. 
This is a further step in flexibility. The devices in the re- 
ceiver/decoder have to interact with software so that 
they can for instance be started and stopped and can 
notify events and they are provided, in known manner, 
with device drivers for that purpose. Hardware devices 
are provided with separate device drivers and devices 
which are embodied in software, or firmware, may have 
integrated drivers. A device driver is a program to control 
a particular device and it responds to communications 
such as interrupts from the system to convert instruc- 
tions from the operating system or an application to 
messages for a specific device. In this known arrange- 
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ment, the DLI provides an interface between the mid- 
dleware and device drivers. Once this is done, the mid- 
dleware can be ported to any receiver/decoder whose 
devices comply with the DLI. 

[0011] A receiver/decoder of this genera! type is de- 
scribed in international patent application number WO 
99/40719, in the name of the present applicant. In the 
system described there, each function of the receiver/ 
decoder is related to a device in the DLI. The DLI holds 
software representations of devices and provides a de- 
vice manager which looks after interactions with the de- 
vices in use of the receiver/decoder. When devices are 
required to carry out a function, data passes between 
programs such as application instruction sequences 
and the devices. The device manager controls this rout- 
ing by declaring each program as a "client" when it 
needs access to a device and assigns the program a 
client number which it adds to a client list for the duration 
of access by that program to the relevant device. 
[0012] The present invention seeks to provide one or 
more improvements in relation to the above prior art. 
[0013] In a first aspect of the invention, there is pro- 
vided a logical device for a receiver/decoder. 
[0014] Such a logical device, situated for example in 
the device layer interface of a receiver/decoder, may re- 
duce the dependence of the software of the receiver/ 
decoder upon the specific hardware solution of the re- 
ceiver/decoder, potentially resulting in the increased 
portability of the software. It may, in addition, facilitate 
the easy upgrade of a receiver/decoder without changes 
to the software being required. 
[0015] Preferably, the logical device further compris- 
es means for binding the logical device to a further de- 
vice. That is to say that the logical device may preferably 
be adaptable to rely upon a particular hardware device 
to perform functionality offered by it. This may advanta- 
geously increase the stability of the software of a receiv- 
er/decoder. 

[0016] The binding means is preferably adapted to 
bind the logical device to a plurality of further devices. 
This may confer the advantage of increasing the flexi- 
bility of a receiver/decoder and facilitate the efficient use 
of hardware. The further layer of abstraction may in ad- 
dition allow for easier programming and maintenance of 
software, and easier programming of applications to be 
executed on a receiver/decoder running the software. 
[001 7] The binding means may preferably be adapted 
to bind the logical device to a software device. This add- 
ed layer of abstraction may allow for easier program- 
ming and maintenance of software. 
[0018] In a preferred embodiment, the logical device 
is adapted to manage a demultiplexing operation. Such 
a logical device encapsulates a number of hardware op- 
erations, which may result in the provision of a platform 
for which applications to be run on a receiver/decoder 
may be programmed more easily. 
[0019] The logical device may preferably comprise 
means for restricting functionality offered by the device. 



For example, a logical demultiplexer may be adapted to 
represent a demultiplexer supporting the playback of a 
bitstream, in which it is required to perform demultiplex- 
ing and filtering operations, and other operations may 
5 be prohibited; alternatively, the logical device may be 
. adapted to represent a demultiplexer supporting the re- 
cording of a bitstream, in which case, it is required to 
perform filtering and remultiplexing operations, and oth- 
er operations may be prohibited. This restriction of func- 
10 tionality may confer additional stability. 

[0020] In a second aspect of the invention, there is 
provided apparatus for a receiver/decoder, the appara- 
tus being provided with at least one function description 
describing a function supported by one or more proo- 
fs esses in use of the receiver/decoder, and means for 
loading a vatue with respect to the or each function de- 
scription for use in said one or more processes. 
[0021] Each function description preferably compris- 
es a set of one or more data fields which together char- 
20 acterise the described function in use of the receiver/ 
decoder. 

[0022] The availability of one or more of said process- 
es is preferably determined by a value in at least one 
data field associated with that process. For example, the 
25 availability may preferably be determined by the pres- 
ence or absence of said value in the at least one data 
field. 

[0023] In a preferred embodiment, each process, and 
thus each function, is supported in use by one or more 
30 devices, and the apparatus is provided with at least one 
device description in respect of one or more of said de- 
vices; means for loading device-specific data with re-* 
spect to said device description; means to detect the' 
presence of at least one device in the receiver/decoder- 

35 which supports a function described by the function de- 
scription; and means to load a function identifier for that 
function description as part of a device identifier for use 
in communicating with the at least one device In use of 
the receiver/decoder. 

40 [0024] Preferably the function supported by one or 
more processes comprises a demultiplexing function. In 
this case, the means for loading a value is preferably 
adapted to load multiple values comprising a set of iden- 
tifiers tor input sources of multiplexed signals. 

45 [0025] Preferably the means to detect the presence 
of at least one device comprises means to detect the 
presence of each of a plurality of devices in the receiver/ 
decoder which together support the function described 
by the function description and said means to load the 

so function identifier for that function description as part of 
a device identifier is adapted to load the same function 
identifier as part of the device identifier in respect of 
each of said. plurality of devices. 
[0026] Preferably the apparatus is adapted to modify 

55 a function description in accordance with devices de- 
tected. 

[0027] In a preferred embodiment, the apparatus is 
provided with at least two different function descriptions 
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and the means to load a function identifier is adapted to 
load a function identifier for each of at least two different 
function descriptions to provide at least two different de- 
vice identifiers for use in communicating with a common 
device in use of the receiver/decoder. 
[0028] Preferably, the apparatus comprises control 
signal management means for managing signals for 
controlling one demultiplexing device to demultiplex at 
least first and second data streams over a common time 
period. 

[0029] Also preferably, the apparatus comprises con- 
trol signal management means for managing signals for 
controlling one or more remuftiplexing devices to remul- 
tiplex at least first and second data streams for recording 
over a common time period. 

[0030] In an aspect of the invention, there is provided 
a method of operating a receiver/decoder, which meth- 
od comprises creating and/or accessing at least one 
function description describing a function supported by 
one or more processes in use of the receiver/decoder, 
and loading a value with respect to the or each function 
description for use in said one or more processes. The 
loading step is preferably performed at first initialisation 
of the receiver/decoder. 

[0031] In a further aspect, there is provided a method 
of using a receiver/decoder which comprises communi- 
cating with at least one device in providing a function, 
wherein a device identifier is used in communicating 
with the at least one device, which identifier comprises 
a part associated with the function and a part associated 
with the device. 

[0032] In a further aspect, there is provided apparatus 
comprising means for instantiating a device for a receiv- 
er/decoder. This may confer the advantage of reducing 
dependence upon a particular hardware configuration 
of a receiver/decoder, resulting in increased portability 
of software, and increased efficiency in terms of require- 
ments upon programmers and size of program, im- 
proved reliability and maintenance of the product/ 
[0033] The instantiating means preferably comprises 
means for providing generic information and means for 
providing instance-specific information to a device being 
instantiated. This abstraction of functionality may confer 
the advantage of using resources more efficiently. When 
implemented in software, this may advantageously re- 
sult in a smaller compiled size. The instantiating means 
may for example copy an existing instance of a device 
(including the generic information, which may in turn in- 
clude an identifier identifying the device type) and then 
impart to it information specific to the instance being cre- 
ated (including, for example, an instance number). The 
device type identifier and the instance number then to- 
gether form a unique identifier for the device. 
[0034] Preferably, the instantiating means is adapted 
to instantiate a device statically. Using static instantia- 
tion, that is instantiation at the time of booting or reboot- 
ing, may provide a more stable environment than using 
dynamic instantiation. 



[0035] In a preferred embodiment, the instantiated 
device is adapted to provide functionality to a client. This 
further level of abstraction may afford a greater ease of 
maintenance of the system and ease of programming 
5 and maintenance of code. 

[0036] Preferably the instantiated device is adapted 
to provide functionality to a plurality of clients. This fea- 
ture may result in more efficient use of resources (for 
example of the hardware of a receiver/decoder). 
10 [0037] Preferably, the instantiated device is capable 
of asynchronous communication, which may give rise 
to more fluid operation and more stable software. 
[0038] In a particularly preferred embodiment., the ap- 
paratus comprises means for receiving information re- 
's lating to a new type of device to be instantiated. This 
information may for example be downloaded by a re- 
ceiver/decoder, and it may relate to a new version of an 
existing device, or to a new type of device. This feature 
may thus increase the flexibilily and ease of mainle- 
20 nance of software. 

[0039] In another particularly preferred embodiment 
the apparatus comprises means for determining a hard- 
ware environment. The apparatus may thus be able to 
tailor instantiated devices based upon detected physical 
25 device; it may not be necessary to know details of the 
environment upon which software is to be run at the time 
of compilation. 

[0040] Preferably, the instantiated device is a logical 
device as aforesaid. 

30 [0041 ] In a further aspect of the invention , there is pro- 
vided apparatus for a receiver/decoder, the apparatus 
being provided with at least one device description and 
means for loading device-specific data with respect to 
said device description. 

35 [0042] Preferably the means for loading device-spe- 
cific data is adapted to load at least one value with re- 
spect to one or more device descriptions, said value 
comprising at least part of a device identifier f6r use in 
communicating with a device in use of the receiver/de- 

40 coder. 

[0043] The apparatus may also comprise means for 
loading device-specific data with respect to more than 
one respective copy of at least one of the device de- 
scriptions. The device-specific data preferably includes 
45 a value loaded to each device instance as device-spe- 
cific data including at least part of a device identifier 
which is different from any value loaded as at least part 
of a device identifier to another copy of the same device 
description. 

so [0044] Preferably, when instantiating devices for use 
in the provision of a function in a receiver/decoder, more 
than one different device is used to provide said func- 
tion, each device description with at least one value 
loaded provides a device instance, and the at least part 

55 of a device identifier is common to at least one device 
instance for each of at least two different devices used 
to provide said function. 

[0045] The device-specific data may, for example, 
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comprise at least one value for a parameter of a proce- 
dure supported by a device to which the description re- 
lates. This value may for example comprise an identifier 
tor an authorised input to the device to which the de- 
scription relates. 

[0046] In a particularly preferred embodiment, the de- 
vice to which the description relates may comprise a de- 
multiplexing device. 

[0047] The apparatus may further comprise limiting 
means for limiting the number of copies of one or more 
device descriptions to a preset maximum. This may as- 
sist in preventing overloading of the resources of the ap- 
paratus. 

[0048] Preferably, the apparatus is further provided 
with at least one function description describing a func- 
tion supported by one or more processes in use of the 
receiver/decoder, and means for loading a value with 
respect to the or each function description for use in said 
one or more processes. 

[0049] In a further aspect of the invention, there is pro- 
vided a method of using a receiver/decoder to provide 
a function, which method comprises selecting an iden- 
tifier for a device from at least two different identifiers 
available for that device and using the selected identifier 
in relation to communications with the device to provide 
the function. 

[0050] In yet a further aspect of the invention, there is 
provided a method of using a receiver/decoder to pro- 
vide a function, which method comprises communicat- 
ing with at least two different devices used in providing 
the function, using a different respective identifier in re- 
lation to communication with each of said two different 
devices, wherein said different respective identifiers 
share a common portion. 

[0051] In a further aspect of the invention, there is pro- 
vided apparatus for processing data, comprising means 
for operating a demultiplexer to demultiplex a plurality 
of services simultaneously. This aspect may benefit 
from increased flexibility. The demultiplexer operating 
means may, for example, be adapted to effect the de- 
multiplexing of at least three, five, ten or twenty services 
simultaneously. 

[0052] In a particularly preferred embodiment, the de- 
multiplexer operating means comprises means for allo- 
cating a respective logical demultiplexer as described 
above to each service to be demultiplexed. 
[0053] In a further aspect of the invention, there is pro- 
vided apparatus for controlling a demultiplexing process 
in a receiver/decoder, comprising control signal man- 
agement means for managing signals for controlling one 
demultiplexing device to demultiplex at least first and 
second data streams over a common time period. 
[0054] The control signal management means may 
be adapted to maintain a first family of devices for use 
together in controlling the demultiplexing device to de- 
multiplex said first data stream, and to maintain a sec- 
ond family of devices for use together in controlling the 
demultiplexing device to demultiplex said second data 



stream. 

[0055] Preferably, the devices of each family are each 
allocated an identifier which has at least a common por- 
tion for all the devices of a family, the common portion 

5 for the first family being different from said common por- 
tion for the second family, for use in co-ordinating proc- 
esses performed by the devices of each family in con- 
trolling the demultiplexing device to demultiplex a re- 
spective data stream. 

10 [0056] The apparatus may preferably further com- 
prise at least one remultiplexing device for remultiplex- 
ing each of said at least two data streams for recording. 
[0057] In a further aspect, the aforesaid apparatus is 
provided in a receiver/decoder, further comprising at 

'5 least two inputs for connection to respective channels 
and correlation means for correlating a signal received 
at a first of said inputs with a signal received at a second 
of said inputs. 

[0058] In yet a further aspect, the invention provides 
20 a method of controlling a demultiplexing process in a 
receiver/decoder, which method comprises sending one 
or more control signals to one demultiplexing device, 
which control signal(s) identify at least first and second 
data streams to be demultiplexed over a common time 
25 period. 

[0059] The method preferably further comprises 
maintaining a first family of devices for use together in 
controlling the demultiplexing device to demultiplex said 
first data stream/and maintaining a second family of de- 

30 vices for use together in controlling the demultiplexing 
device to demultiplex said second data stream. 
[0060] The method may further comprise allocating 
an identifier to each device of each family, which iden- 
tifier has at least a common portion for all the devices 

35 of a family, said common portion for the first family being 
different from said common portion for the second fam- 
ily, for use in co-ordinating processes performed by the 
devices of each family in controlling the demultiplexing 
device to demultiplex a respective data stream. 

40 [0061] In yet a further aspect of the invention, there is 
provided a control word device for managing a descram- 
bling operation, the device being implemented in soft- 
ware. It is known for the descrambling operation to be 
managed by hardware devices; the present aspect of 

45 the invention may confer the advantage of Increased se- 
curity. 

[0062] In yet a further aspect, the invention provides 
apparatus for a receiver/decoder comprising an inter- 
face for use in controlling descrambling equipment to 

50 descramble signals. 

[0063] The apparatus may further comprise means to 
assign an identifier to an instance of use of the descram- 
bling equipment to descramble a signal, which identifier 
is used in controlling the descrambling equipment in re- 

55 lation to that instance of use by means of the interface. 
[0064] The means to assign an identifier may com- 
prise means to assign more than one identifier to the 
descrambling equipment over the same time period, 
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each identifier being for use in controlling the descram- 

bling equipment with respect to a respective instance of 

use of the descrambling equipment. 

[0065] At least first and second instances of use of the 

descrambling equipment may be subject to at least one 

different respective access condition for descrambling 

signals. 

[0066] The apparatus may be arranged to control sup- 
ply of a decryption key to the descrambling equipment 
for use in a respective descrambling process. For ex- 
ample, the apparatus may be arranged to co-ordinate 
supply of a decryption key, from means for receiving de- 
livery of decryption keys, to the descrambling equip- 
ment, the co-ordination being done by use of the iden- 
tifier assigned to each respective instance of use of the 
descrambling equipment. The decryption key may, for 
example, be received In a multiplexed information sig- 
nal. 

[0067] The interface may be accessible to at least one 
device in a family of devices supporting a demultiplexing 
function and the apparatus may further comprise means 
to provide more than one instance of the same device 
in the family of devices, each instance so provided being 
related to at least one assigned identifier for an instance 
of use of the descrambling equipment. 
[0068] in yet a further aspect of the invention, there is 
provided a method of descrambling scrambled signals, 
comprising the use of an interface in the control of de- 
scrambling equipment. The method may, for example, 
comprise the steps of assigning an identifier to an in- 
stance of use of the descrambling equipment; and using 
the identifier in controlling the descrambling equipment 
in relation to said instance of use by means of the inter- 
face. 

[0069] The method may further comprise assigning a 
first identifier to a first instance of use of the descram- 
bling equipment, assigning a second identifier to a sec- 
ond instance of use of the descrambling equipment, and 
using the first and second identifiers to distinguish the 
first and second instances of use in controlling the de- 
scrambling equipment, said first and second instances 
of use occurring over a common time period. 
[0070] The first and second instances of use of the 
descrambling equipment may be subject to at least one 
different respective access condition for descrambling. 
[0071] In a further aspect of the invention, there is pro- 
vided apparatus for processing data, comprising means 
for recording a first service, means for simultaneously 
recording a second service and means for playing back 
the first service and the second service at respective 
times chosen by a user. Such apparatus may provide 
increased flexibility and utility for the user. 
[0072] In yet a further aspect, the invention provides 
apparatus for a receiver/decoder comprising recording 
means for recording two or more programme data 
streams over a common time period. 
[0073] In yet a further aspect, the invention provides 
a method of recording programme signals, comprising 



recording two or more different programme data 
streams over a common time period. 
[0074] In a further aspect of the present invention, 
there is provided apparatus for processing data, com- 

5 prising means for receiving service data on a first chan- 
nel and means for receiving conditional access data re- 
lating to that service on a second channel. This may con- 
fer the advantage of reducing the bandwidth required to 
receive conditional access. 

io [0075] The apparatus may further comprise means 
for causing the conditional access data receiving means 
to change the channel from which it receives the condi- 
tional access data. It may thus be possible to receive 
conditional access data from a channel which changes, 

'5 for example periodically, enabling the channel upon 
which conditional access data is broadcast to change, 
thus allowing channel-hopping of conditional access da- 
ta, which may increase security. 
[0076] To this end, a further aspect of the invention 

20 provides a broadcast centre comprising service data 
broadcasting means adapted to broadcast service data 
excluding conditional access data on a first channel, and 
conditional access data broadcasting means for broad- 
casting conditional access data relating to the service 

25 on a second channel. 

[0077] The broadcast centre may further comprise 
means for causing the conditional access data broad- 
casting means to change the channel upon which the 
conditional access data is broadcast. 

30 [0078] In yet a further aspect of the invention, there is 
provided a conditional access system comprising serv- 
ice data broadcasting means for broadcasting service 
data excluding conditional access data on a first chan- 
nel, conditional access data broadcasting means for 

35 broadcasting conditional access data relating to the 
service on a second channel, service data receiving 
means for receiving the service data and conditional ac- 
cess data receiving means for receiving the conditional 
access data. 

^o [0079] In a further aspect, the invention provides ap- 
paratus for a receiver/decoder, for use in receiving and/ 
or decoding signals received at the apparatus over more 
than one channel, wherein said apparatus comprises at 
least two inputs for connection to respective channels 

45 and correlation means for correlating a signal received 
at a first of said inputs with a signal received at a second 
of said inputs. 

[0080] The apparatus may further comprise detection 
means for detecting a channel identifier received in the 

50 signal at the first input, channel selection means for se- 
lecting a channel for connection to said second input, 
and control means to control the channel selection 
means to select a channel identified by the channel 
identifier for connection to said second input. Each re- 

55 spective channel may for example have a different car- 
rier frequency. 

[0081] The signal received at the first input may com- 
prise at least primarily content data and the signal re- 
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ceived at the second input may comprise administrative 
data with respect to the content data. 
[0082] The apparatus may further comprise an inter- 
face for use in controlling descrambling equipment to 
descramble information signals. 
[0083] In a further aspect of the invention, there is pro- 
vided a broadcast system for broadcasting related sig- 
nals in multiplexed signal transport streams, which com- 
prises broadcast means for broadcasting a first signal 
in a first multiplexed signal transport stream, broadcast 
means for broadcasting a second signal in a second 
multiplexed signal transport stream, and correlation sig- 
nal transmission means for transmitting a correlation 
signal for use in correlating the related signals. The cor- 
relation signal may for example comprise carrier fre- 
quency data for identifying a carrier frequency for at 

; least one of the first and second transport streams. The 
correlation signal may additionally or alternatively com- 
prise at least one slot identifier for identifying a slot in 

; one of the first and second transport streams. 
[0084] The invention also provides a computer pro- 
gram and a computer program product for carrying out 
any of the methods described herein and/or for embod- 
ying any of the apparatus features described herein, and 
a computer readable medium having stored thereon a 
program for carrying out any of the methods described 
herein and/or for embodying any of the apparatus fea- 
tures described herein. 

[0085] The invention also provides a signal embody- 
ing a computer program for carrying out any of the meth- 
ods described herein and/or for embodying any of the 
apparatus features described herein, a method of trans- 
mitting such a signal., and a computer product having an 
operating system which supports a computer program 
for carrying out any of the methods described herein 
and/or for embodying any of the apparatus features de- 
scribed herein. 

[0086] The invention extends to methods and/or ap- 
paratus substantially as herein described with reference 
to the accompanying drawings. 
[0087] Any feature in one aspect of the invention may 
be applied to other aspects of the invention, in any ap- 
propriate combination. In particular, method aspects 
may be applied to apparatus aspects, and vice versa. 
[0088] Furthermore, features implemented in hard- 
ware may generally be implemented in software, and 
vice versa. Any reference to software and hardware fea- 
tures herein should be construed accordingly. 
[0089] Preferred features of the present invention will 
now be described, purely by way of example,. with ref- 
erence to the accompanying drawings, in which:- 

Figure 1 is an overview of a satellite digitaltelevision 
system; 

Figure 2 is an overview of a cable digital television 
system; 

Figure 3 is an overall system view, with the head- 
end shown in more detail; 



Figure 4 is a schematic of the component architec- 
ture of the receiver/decoder; 
Figure 5 is a diagram of the software architecture 
of the receiver/decoder; 
5 Figure 6 is a diagram showing the top half of Figure 
5 in more detail; 

Figure 7 is a diagram showing the bottom half of 
Figure 5 in more detail; 

Figure 8 is a diagram showing an alternative em- 
10 bodiment of the bottom half of Figure 5; 

Figure 9 shows the structure of software devices in 
accordance with an embodiment; 
Figure 10 shows the structure of a compound de- 
vice identifier- 
is Figures 1 1 a and b represent respectively a class de- 
scription for a device class and a set of instantiation 
data for a device instance; 
Figure 12 shows the three types of logical demulti- 
plexer and their supporting devices in accordance 
20 with an embodiment; 

Figures 13a, b and c represent stages in a process 
for selecting a hardware demultiplexer; 
Figure 1 4 is a flow diagram for the process to which 
Figure 1 3 relates; 
25 Figure 1 5 shows time lines illustrating the facility of 
an embodiment for recording more than one service 
simultaneously; 

Figure 16 illustrates the conditional access opera- 
tions performed by an embodiment when demulti- 
30 plexing and descrambling a service; and 

Figure 17 is an overview of a system for providing 
conditional access data. 

System overview 

35 

[0090] An overview of a digital television system 500 
is shown in Figure 1 . As will be discussed below, the 
system 500 comprises a broadcast centre 10u0, a re- 
ceiver/decoder 2000, a software/hardware architecture 
40 3000 of the receiver/decoder, an interactive system 
4000, and a conditional access system 5000, as will all 
be discussed below. . 

[0091 ] The system 500 includes a mostly convention- 
al digital television system 502 that uses the known 

45 MPEG-2 compression system to transmit compressed 
digital signals. In more detail, MPEG-2 compressor 
1010 in a broadcast centre 1 000 receives a digital signal 
stream (typically a stream of video signals). The com- 
pressor 1010 is connected by linkage 1020 to a mutti- 

50 plexer and scrambler 1030. 

[0092] The multiplexer 1 030 receives a plurality of fur- 
ther input signals, assembles the transport stream and 
transmits compressed digital signals to a transmitter 
510 of the broadcast centre via linkage 1022 : which can 

55 of course take a wide variety of forms including telecom- 
munications links. The transmitter 510 transmits elec- 
tromagnetic signals via uplink 514 towards a satellite 
transponder 520, where they are electronically proc- 
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essed and broadcast via notional downlink 516 to earth 
receiver 512, conventionally in the form of a dish owned 
or rented by the end user. Other transport channels for 
transmission of the data are of course possible, such as 
terrestrial broadcast, cable transmission, combined sat- 5 
ellite/cable links, telephone networks etc. 
[0093] The signals received by receiver 51 2 are trans- 
mitted to an integrated receiver/decoder 2000 owned or 
rented by the end user and connected to the end user's 
television set 10000. The receiver/decoder 2000 de- 10 
codes the compressed MPEG-2 signal into a television 
signal for the television set 10000. Although a separate 
receiver/decoder is shown in Figure 1 , the receiver/de- 
coder may also be part of an integrated digital television. 
As used herein, the term "receiver/decoder includes a 15 
separate receiver/decoder, such as a set-top box, and 
a television having a receiver/decoder integrated there- 
with. 

[0094] In the receiver/decoder 2000 a hard disk 21 00 
is provided, on which audiovisual and other data can be 20 
stored. This allows advanced recording and playback 
facilities for programmes received by the receiver/de- 
coder, and also allows large amounts of other types of 
data, such as electronic programme guide data, to be 
stored in the receiver/decoder. 25 
[0095] A content management and protection system 
(CM PS) 2300 (not shown) in the receiver/decoder pro- 
vides the ability securely and flexibly to control the re- 
cording and playback of data on the hard disk 2100 (or 
other storage device). 30 
[0096] In a multichannel system, the multiplexer 1 030 
handles audio and video information received from a 
number of parallel sources and interacts with the trans- 
mitter 510 to broadcast the information along a corre- 
sponding number of channels. In addition to audiovisual 35 
information, messages or applications or any other sort 
of digital data may be introduced in some or all of these 
channels interlaced with the transmitted digital audio 
and video information. 

[0097] An interactive system 4000 is connected to the *o 
multiplexer 1030 and the receiver/decoder 2000, and is 
located partly in the broadcast centre and partly in the 
receiver/decoder. It enables the end user to interact with 
various applications via a back channel 570. The back 
channel may be, for example a Public Switched Tele- 43 
phone Network (PSTN) channel (for example, a mo- 
demmed back channel) or an Out of Band (OOB) chan- 
nel. 

[0098] A conditional access system 5000, also con- 
nected to the multiplexer 1 030 and the receiver/decoder so 
2000 and again located partly in the broadcast centre 
and partly in the receiver/decoder, enables the end user 
to access digital television broadcasts from one or more 
broadcast suppliers. A smartcard, capable of decipher- 
ing messages relating to commercial offers (that is, one 55 
or several television programmes sold by the broadcast 
supplier), can be inserted into the receiver/decoder 
2000. Using the receiver/decoder 2000 and smartcard, 



the end user may purchase commercial offers in either 
a subscription mode or a pay-per-view mode. Typically 
this is achieved using the back channel 570 which is 
used by the interactive system 4000. 
[0099] As mentioned above, programmes transmitted 
by the system are scrambled at the multiplexer 1030, 
the conditions and encryption keys applied to a given 
transmission being determined by the access control 
system 5000. Transmission of scrambled data in this ' 
way is well known in the field of pay TV systems. Typi- 
cally, scrambled data is transmitted together with a con- 
trol word for descrambling of the data, the control word 
itself being encrypted by a so-called exploitation key and 
transmitted in encrypted form. 
[0100] The scrambled data and encrypted control 
word are then received by the receiver/decoder 2000 
having access to an equivalent to the exploitation key 
stored on a smartcard inserted in the receiver/decoder 
to decrypt the encrypted control word and thereafter de- 
scramble the transmitted data. A paid-up subscriber will 
receive, for example, in a broadcast monthly EMM (En- 
titlement Management Message) the exploitation key 
necessary to decrypt the encrypted control word so as 
to permit viewing of the transmission. 
[0101] Figure 2 illustrates an alternative embodiment 
of a digital television system 504, utilising a cable net- 
work as the broadcast medium for the compressed dig- 
ital signals. In this figure, like parts are indicated with 
like numerals. 

[0102] The satellite transponder and transmitting and 
receiving stations are replaced by a cable network 550. 
Additionally, in this particular embodiment, the mo- 
demmed back channel between the receiver/decoder 
2000 and the interactive system 4000 and conditional 
access system 5000 is removed, replaced by linkages 
554, 556 between the cable network 550 and the con- 
ditional access system 5000 and interactive system 
4000 respectively. The receiver/decoder 2d00 thus 
communicates with the other systems via the cable net- 
work 550, utilising a cable modem or other means to 
allow it to send and receive data via the same link as it 
receives data from the broadcast centre. 
[0103] The cable network 550 may be any form of 
wide area network (WAN), such as a dedicated connec- 
tion, the internet, local cable distribution network, wire- 
less connection, or any combination of the above. In the 
present embodiment, the hybrid fibre coax (HFC) net- 
work is used. It is appreciated that the various means of 
communication between the receiver/decoder 2000 and 
the other components of the television system are inter- 
changeable. 

Conditional access system 

[0104] With reference to Figure 3, in overview the con- 
ditional access system 5000 includes a Subscriber Au- 
thorization System (SAS) 5200. The SAS 5200 is con- 
nected to one or more Subscriber Management Sys- 
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terns (SMS) 1 1 00 : one SMS for each broadcast supplier, 
by a link 1 044, which may be a TCP-IP link or other type 
of link. Alternatively, one SMS could be shared between 
two commercial operators, or one operator could use 
two SMSs, and so on. 

[0105] First encrypting units in the form of ciphering 
units 5100 utilising "mother" smartcards 5110 are con- 
nected to the SAS by linkage 1042. Second encrypting 
units again in the form of ciphering units 5102 utilising 
mother smartcards 51 1 2 are connected to the multiplex- 
er 1030 by linkage 1 040. The receiver/decoder 2000 re- 
ceives a "daughter" smartcard 5500. The receiver/de- 
coder is connected directly to the SAS 5200 via com- 
munications servers 1200 and the modemmed back 
channel 570. The SAS sends amongst other things sub- 
scription rights to the daughter smartcard on request. 
[0106] In variants of the preferred embodiment, inter- 
net or cable connections either complement or replace 
the PSTN 570 and communications servers 1200. 
[0107] The smartcards contain confidential informa- 
tion from one or more commercial operators. The "moth- 
er" smartcard encrypts different kinds of messages and 
the "daughter" smartcards decrypt the messages, if they 
have the rights to do so. 

[0108] With reference to Figure 3, in the broadcast 
centre, the digital video signal is first compressed (or bit 
rate reduced), using the MPEG-2 compressor 1010. 
This compressed signal is then transmitted to the mul- 
tiplexer and scrambler 1030 in order to be multiplexed 
with other data, such as other compressed data. 
[0109] The scrambler generates a control word used 
in the scrambling process and included in the MPEG-2 
stream in the multiplexer 1 030. The control word is gen- 
erated internally and enables the end user's integrated 
receiver/decoder 2000 to descramble the programme. 
[01 1 0] Access criteria, indicating how the programme 
is commercialised, are also added to the MPEG-2 
stream. The programme may be commercialised in ei- 
ther one of a number of "subscription" modes and/or one 
of a number of "Pay Per View" (PPV) modes or events. 
In the subscription mode, the end user subscribes to one 
or more commercial offers, or "bouquets", thus getting 
the rights to watch every channel inside those bouquets. 
In the Pay Per View mode, the end user is provided with 
the capability to purchase events as he wishes. 
[0111] Both the control word and the access criteria 
are used to build an Entitlement Control Message 
(ECM); this is a message sent in relation with one 
scrambled program; the message contains a control 
word (which allows for the descrambling of the program) 
and the access criteria of the broadcast program. The 
access criteria and control word are transmitted to the 
second encrypting unit 51 02 via the linkage 1 040. In this 
unit, an ECM is generated, encrypted and transmitted 
on to the multiplexer and scrambler 1 030. 
[01 1 2] Each service broadcast by a broadcast suppli- 
er in a data stream comprises a number of distinct com- 
ponents; for example a television programme includes 



a video component, an audio component, a sub-title 
component and so on. Each of these components of a 
service is individually scrambled and encrypted for sub- 
sequent broadcast. In respect of each scrambled com- 

5 ponent of the service, a separate ECM is required. 
[0113] The multiplexer 1030 receives electrical sig- 
nals comprising encrypted EMMs from the SAS 5200, 
encrypted ECMs from the second encrypting unit 5102 
and compressed programmes from the compressor 

10 1010. The multiplexer 1 030 scrambles the programmes 
and transmits the scrambled programmes, the encrypt- 
ed EMMs and the encrypted ECMs as electric signals 
to broadcast system 600, which may be for example a 
satellite system as shown in Figure 1 , or other broadcast 

15 system. The receiver/decoder 2000 demultiplexes the 
signals to obtain scrambled programmes with encrypted 
EMMs and encrypted ECMs. 

[0114] The receiver/decoder receives the broadcast 
signal and extracts the MPEG-2 data stream. If a pro- 

20 gramme is scrambled, the receiver/decoder 2000 ex- 
tracts the corresponding ECM from the MPEG-2 stream 
and passes the ECM to the "daughter" smartcard 5500 
of the end user. This slots into a housing in the receiver/ 
decoder 2000. The daughter smartcard 5500 controls 

25 whether the end user has the right to decrypt the ECM 
and to access the programme. If not, a negative status 
is passed to the receiver/decoder 2000 to indicate that 
the programme cannot be descrambled. If the end user 
does have the rights, the ECM is decrypted and the con- 

30 trol word extracted. The decoder 2000 can then de- 
scramble the programme using this control word. The 
MPEG-2 stream is decompressed and translated into a. 
video signal for onward transmission to television set 
10000. 

35 [0115] If the programme is not scrambled, no ECM will 
have been transmitted with the MPEG-2 stream and the 
receiver/decoder 2000 decompresses the data and 
transforms the signal into a video signal for transmission 
to television set 10000. 

40 [0116] The subscriber management system (SMS) 
1100 includes a database 1150 which manages, 
amongst others, all of the end user files, commercial of- 
fers (such as tariffs and promotions), subscriptions, PPV 
details, and data regarding end user consumption and 

45 authorization. The SMS may be physically remote from 
the SAS. 

[01 1 7] The SMS 1 1 00 transmits messages to the SAS 
5200 which imply modifications to or creations of Enti- 
tlement Management Messages (EMMs) to be transmit- 

50 ted to end users. The SMS 1 1 00 also transmits messag- 
es to the SAS 5200 which imply no modifications or cre- 
ations of EMMs but imply only a change in an end user's 
state (relating to the authorization granted to the end 
user when ordering products or to the amount mat the 

55 end user will be charged). The SAS 5200 also sends 
messages (typically requesting information such as call- 
back information or billing information) to the SMS 11 00, 
so that it will be apparent that communication between 
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the two is two-way. 
Receiver/decoder 

[0118] Referring to Figure 4, the various elements of 
receiver/decoder 2000 will now be described in terms of 
functional blocks. 

[01 1 9] The receiver/decoder 2000, which may be, for 
example, a digital set-top box (DSTB), comprises a cen- 
tral host processor 2002 and a digital TV coprocessor 
2004, both having associated memory elements (not 
shown) and joined by a coprocessor bus 2006. The co- 
processor 2004 is adapted to receive input data from a 
USB interface 2070, a serial interface 2072, a parallel 
interface (not shown), a modem 2074 (connected to the 
modem back channel 570 of Fig. 1 ), and switch contacts 
on the front panel 2054 of the decoder. 
[0120] The receiver/decoder is additionally adapted 
to receive inputs from an infra-red remote control 2080 
(and optionally from other wireless peripherals 2082 
such as Bluetooth-enabled devices) and also possess- 
es two smartcard readers 2050, 2052 adapted to read 
bank and subscription smartcards 2060, 2062 respec- 
tively. The subscription smartcard reader 2052 engages 
with an inserted subscription card 2062 and with a con- 
ditional access unit (not shown) to supply the necessary 
control word to a demultiplexer/descrambler/remulti- 
plexer unit 2010 to enable the encrypted broadcast sig- 
nal to be descrambled. The decoder also includes a con- 
ventional tuner 2016 and demodulator 2012 to receive 
and demodulate the satellite transmission before being 
filtered and demultiplexed by the demodulator/descram- 
bler unit 201 0. A second tuner201 8 and second demod- 
ulator 2014 are also provided, to allow, amongst other 
things, a second channel to be received and decoded 
in parallel with the first. 

[0121] A hard disk 2100 is also provided, allowing 
storage of programme and application data received 
and generated by the receiver/decoder. In conjunction 
with the two tuners 201 6, 201 8, two demodulators 201 2, 
2014, the descrambler/demultiplexer/remultiplexer 
2010, and the data decoder 2024 and audio decoder 
2026, advanced recording and playback features are 
provided, allowing simultaneous recordings of one or 
more programmes while a further programme is being 
viewed, and more general transfers to and from the hard 
disk to and from the display devices and/or inputs and 
outputs, all occurring in parallel. 
[0122] The audio output 2038 and video output 2040 
in the receiver/decoder are fed by the PCM mixer 2030 
and audio DAC 2034, and the MPEG video decoder 
2028, graphic engine 2032 and PAL/SECAM encoder 
2036 respectively. Alternative or complementary out- 
puts may of course be provided. 
[0123] As used in this description, an application is 
preferably a piece of computer code for controlling high 
level functions of preferably the receiver/decoder 2000. 
For example, when the end user positions the focus of 



remote control 2080 on a button object seen on the 
screen of the television set (not shown) and presses a 
validation key, the instruction sequence associated with 
the button is run. Applications and the associated mid- 
5 dleware are executed by the host processor 2002, with 
remote procedure calls (RPCs) being made to the digital 
TV coprocessor 2004 across the coprocessor bus 2006 
as and when required. 

[0124] An interactive application proposes menus 
10 and executes commands at the request of the end user 
and provides data related to the purpose of the applica- 
tion. Applications may be either resident applications, 
that is, stored in the ROM (or FLASH or other non-vol- 
atile memory) of the receiver/decoder 2000, or broad- 
15 cast and downloaded into the RAM, FLASH memory or 
hard disk of the receiver/decoder 2000. 
[01 25] Applications are stored in memory locations in 
the receiver/decoder 2000 and represented as resource 
files. The resource files comprise graphic objeel de- 
scription unit files, variables block unit files, instruction 
sequence files, application files and data files. 
[0126] The receiver/decoder contains memory (not 
shown) divided into at least one RAM volume, a FLASH 
volume and at least one ROM volume, but this physical 
organization is distinct from the logical organization. The 
memory may further be divided into memory volumes 
associated with the various interfaces. From one point 
of view, the memory can be regarded as part of the hard- 
ware; from another point of view, the memory can be 
regarded as supporting or containing the whole of the 
system shown apart from the hardware. 

Architecture of receiver/decoder 

[0127] With reference to Figure 5, the software/hard- 
ware architecture 3000 of the receiver/decoder contains 
five software layers : organized so that the software can 
be implemented in any receiver/decoder and with any 
operating system. The various software layers are ap- 
plication layer 3100, application programming interface 
(API) layer 3300, virtual machine layer 3500, device lay- 
er interface 3700 (often abbreviated just to 'device lay- 
er*) and system software/hardware layer 3900. 
[0128] The application layer 3100 encompasses ap- 
plications 31 20 that are either resident in or downloaded 
to the receiver/decoder. They may be interactive appli- 
cations used by customers, written in, for example, 
Java, HTML, MHEG-5 or other languages, or they may 
be applications used by the receiver/decoder for other 
purposes, for example for running such interactive ap- 
plications. This layer is based on a set of open Applica- 
tion Programming Interfaces (APIs) provided by the Vir- 
tual Machine layer. This system allows applications to 
be downloaded to the hard disk, flash memory or RAM 
memory in the receiver/decoder on-the-fly or on de- 
mand. The application code can be transmitted in com- 
pressed or uncompressed format using protocols such 
as Data Storage Media Command and Control (DSM- 
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CC), Network File Server (NFS) or other protocols. 
[01 29] The API layer 3300 provides high-level utilities 
for interactive application development. It includes sev- 
eral packages that make up this high-level API. The 
packages provide all the functionality necessary to run 5 
interactive applications. The packages are accessible 
by the applications. 

[0130] In a preferred embodiment the API is adapted 
for applications written in the Java, PanTalk or such sim- 
ilar programming languages. Furthermore, it can facili- 10 
tate the interpretation of HTML and other formats, such 
as MHEG-5. Besides these features, it also includes 
other packages and service modules that are detacha- 
ble and extensible as requirements dictate. 
[01 31 ] The virtual machine layer 3500 is composed of ^ 
language interpreters and various modules and sys- 

: terns. This layer, managed by a kernel 3650 (not 
shown), consists of everything necessary to receive and 
execute interactive applications in the receiver/decoder. 

. [01 32] The device layer interface 3700 includes a De- 20 
vice Manager and software devices (generally referred 
to herein as just 'devices'). Devices are software mod- 
ules which consist of the logical resources necessary 
for management of external events and physical inter- 
faces. The device layer interface, under the control of 25 
the Device Manager, manages communication chan-. 
nels between drivers and applications and provides en- 
hanced error exception checking. Some examples of 
managed (hardware) devices are: card readers 3722 
(not shown), modems 3730 (not shown), network 3732 30 
(not shown), PCMCIA (Personal Computer Memory 
Card International Association), LED display and so on. 
Programmers do not have to deal with this layer directly, 
since the API layer controls the devices from above. 
[0133] The system software/hardware layer 3900 is 35 
provided by the manufacturer of the receiver/decoder. 
Because of the modularity of the system and because 
services supplied by the higher-level operating system 
(such as event scheduling and memory management) 
are part of the virtual machine and kernel, the higher 40 
layers are not tied to a particular real-time operating sys- 
tem (RTOS) or to a particular processor. 
[01 34] Typically the virtual machine layer 3500, occa- 
sionally in combination with the device layer interlace 
3700 and/or API 3300, is referred to as the 'middleware' 45 
of the receiver/decoder. 

[0135] With reference to Figure 6 the software archi- 
tecture of the receiver/decoder 3000 corresponding to 
the top half of Figure 5 (comprising the application layer 
3100, API layer 3300 and virtual machine layer 3500) 50 
will now be described in more detail. 
[0136] Interactive applications are applications that 
the user interacts with, for example : to obtain products 
and services, such as electronic program guides, tele- 
banking applications and games. 5 $ 
[01 37] There are two types of application in the appli- 
cation layer 3100, plus the Application Manager 3110. 
There are interactive applications such as a Web Brows- 



er 31 30 which can be added at any time as long as they 
conform to the API 3300, and there are resident appli- 
cations which manage and support the interactive ap- 
plications. The resident applications are substantially 
permanent and include the following: 

• Boot. The Boot application 31 42 is the first applica- 
tion launched when the receiver/decoder is pow- 
ered on. The Boot application first starts the Appli- 
cation Manager 3110, and then starts the "Manag- 
er" software modules in the virtual machine 3500, 
such as the Memory Manager 3544 and the Event 
Manager 3546. 

• Application Manager. The Application Manager 
3110 manages the interactive applications that are 
run in the receiver/decoder, that is, it starts, stops, 
suspends, resumes, handles events and deals with 
communication between applications. It allows mul- 
tiple applications to run at once, and thus is involved 
in the allocation of resources among them. This'ap- 
plication is completely transparent to the user. 

• SetUp. The purpose of the SetUp application 3144 
is to configure the receiver/decoder, primarily the 
first time it is used. It performs actions such as scan- 
ning for TV channels, setting the date and time, es- 
tablishing user preferences, and so on. However, 
the SetUp application can be used at any time by 
the user to change the receiver/decoder configura- 
tion. 

Zapping. The Zapping application 3146 is used to 
change channels using the Program-up, Program- 
down and numeric keys. When another form of zap- " 
ping is used, for example, through a banner (pilot) 
application, the Zapping application is stopped. 

• Callback. The Callback application 31 48 is used to 
extract the values of various parameters stored in 
the receiver/decoder memory and return these val- 
ues to the commercial operator via modemmed 
back channel 1 070 (not shown) , or by other means. 

[01 38] Other applications in the application layer 31 00 
include a program guide application 3132, a pay-per- 
view application 31 34, a banner (pilot) application 31 36, 
a home banking application 31 38, a software download 
application 3140 and a PVR (personal video recorder) 
application 3154 (see below). 

[01 39] As noted above, the Application Programming 
Interface (API) layer 3300 contains several packages. 
These include basic system packages 3310, used, for 
example, to access basic features of the virtual ma- 
chine, DAVIC packages 3320, and proprietary packages 
3330, used to access features of the software architec- 
ture unique to the principal software vendor. 
[01 40] Considered in more detail, the virtual machine 
3500 includes the following: 

• Language Interpreters 3510. Different interpreters 
can be installed to conform to the type of applica: 



11 



21 



EP 1 304 871 A2 



22 



tions to be read. These include Java interpreters 
351 2, PanTalk interpreters 351 4, HTML interpreters 
351 6, MHEG-5 interpreters 3518 and others. 

• Service Information (SI) Engine. The SI Engine 
3540 loads and monitors common Digital Video 5 
Broadcasting (DVB) or Program System Informa- 
tion Protocol (PSIP) tables and puts them into a 
cache. It allows access to these tables by applica- 
tions which need the data contained in them. 

• Scheduler 3542. This module allows for pre-emp- 
tive, multithreaded scheduling with each thread 
having its own event queue. 

• Memory Manager 3544. This module manages the 
access to memory. It also automatically compress- 
es data in memory when necessary and performs 
automatic garbage collection. 

• Event Manager 3546. This module allows events to 
be triggered according to priority. It manages timer 
and event grabbing and allows applications to send 
events to each other. 

• Dynamic Linker 3548. This module allows the res- 
olution of addresses arising from native Java func- 
tions, loads native methods from a Java class 
downloaded into RAM and resolves calls from 
downloaded native codes towards ROM. 

• Graphics System 3550. This system is object-ori- 
entated and optimized. It includes graphic window 
and object management as well as a vectorial font 
engine with multi-language support. 

• Class Manager 3552. This module loads classes 
and resolves any class referencing problems. 

• File System 3554. This module is compact and op- 
timized to manage a hierarchical file system with 
multiple ROM, flash, RAM and DSMCC volumes. 
Flash integrity is guaranteed against any incidents. 

• Security Manager 3556. This module authenticates 
applications and controls the access of applications 
to sensitive memory and other zones of the set-top 
box. 

• Downloader 3558. This module uses automatic da- 
ta loading from a remote DSMCC carousel or 
through the NFS protocol, with downloaded files ac- 
cessed in the same way as resident ones. Memory 
clear-up, compression and authentication are also 
provided. 

[0141] Furthermore, the DAVIC resource notification 
model is supported so that client resources are efficient- 
ly managed. 

[0142] A kernel 3650 manages the various different 
processes running in the virtual machine 3500 and de- 
vice layer interface 3700 (not shown). For efficiency and 
reliability reasons, the kernel implements relevant parts 
of the POSIX standard for operating systems. 
[01 43] Under control of the kernel, the virtual machine 
(running Java and Pantalk applications) runs in its own 
thread, separate to other 'server 1 elements of the oper- 
ating system, such as the mass storage server 3850 (not 



shown). Corresponding provisions, such as requiring 
Thread IDs to be passed as parameters in system calls, 
are also made in the API layer 3300 to allow the appli- 
cations 3120 to benefit from the multithreaded environ- 
ment. 

[0144] By providing multiple threads, more stability 
can be achieved. For example, if the virtual machine 
3500 ceases to operate for some reason, by suffering a 
crash or being blocked for a long time by an application 
trying to access a device, other time-critical parts of the 
system, such as the hard disk server, can continue to 
operate. 

[01 45] As well as the virtual machine 3500 and kernel 
3650, a hard disk video recorder (HDVR) module 3850 
is provided for handling the recording and playback 
functions of the hard disk 2210 or other attached mass 
storage component. The server comprises two separate 
threads 3854, 3856 handling recordfng, one thread 
3858 for handling playback, and a file system library 
3852 for interfacing with the mass storage components. 
[01 46] An appropriate one of the threads 3854, 3856, 
3858 in the hard disk video recorder (HDVR) 3850 re- 
ceives commands (such as a command to start record- 
ing a particular programme) from clients such as the per- 
sonal video recorder (PVR) application 3154, in re- 
sponse to the user pressing a 'record* button, for exam- 
ple. 

[0147] In turn, the thread in question then interacts 
with the service device 3736 (shown in Figure 7) to set 
up and synchronise the parts of the receiver/decoder 
handling the bitstream to be recorded or played back. 
In parallel, the thread also interacts with the file system 
library 3852 to coordinate the recording or playback op- 
eration at appropriate places on the hard disk 221 0 (not 
shown). 

[0148] The file system library 3852 then sends com- 
mands to the mass storage device 3728 (also shown in 
Figure 7) which tell the mass storage device 3728 which 
sub-transport stream (STS) to transfer (via a FIFO buff- 
er), and on which hard disk target the stream should be 
stored. Allocation of clusters on the hard disk and gen- 
eral file management is earned out by the file system 
library 3852, the mass storage device itself being con- 
cerned with lower level operations. 
[0149] The service device 3736 mentioned above is 
unique amongst the devices in that it does not relate to 
a physical component of the receiver/decoder It instead 
provides a high level interface which groups together in 
a single 'instance* the various sets of tuner, demultiplex- 
er, remultiplexer and hard disk devices in the receiver/ 
decoder, freeing higher level processes from the diffi- 
culties of coordinating the various sub-devices. 
[0150] With reference to Figure 7 the software archi- 
tecture of the receiver/decoder 3000 corresponding to 
the bottom half of Figure 5 (comprising the device layer 
interface 3700 and the system software and hardware 
layer 3900) will now be described in more detail. 
[0151] Further devices provided in the device layer in- 
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elude the conditional access device 3720, tuner devices 
3724 corresponding to the two (or potentially more) tun- 
ers 201 6, 2018 of Figure 4, the video device 3734, the 
I/O port device 3726, and the service device 3736 and 
mass storage device 3728 mentioned above. 
[0152] In broad terms, a device can be regarded as 
defining a logical interface, so that two different devices 
may be coupled to a common physical port. Certain de- 
vices may communicate among themselves, and all de- 
vices also operate under the control of the kernel 3650. 
[01 53] Before using the services of any device, a pro- 
gram (such as an application instruction sequence) has 
to be declared as a "client", that is, a logical access-way 
to the device or the device manager 3710. The manager 
gives the client a client number which is referred to in 
all accesses to the device. A device can have several 
clients, the number of clients for each device being 
specified depending on the type of device. A client is 
introduced lo the device by a procedure "Device: Open 
Channel". This procedure assigns a client number to the 
client. A client can be taken out of the device manager 
371 0 client list by a procedure "Device: Close Channel". 
[01 54] The access to devices provided by the device 
manager 371 0 can be either synchronous or asynchro- 
nous. For synchronous access, a procedure "Device: 
Call" is used. This is a means of accessing data which 
is immediately available or a functionality which does 
not involve waiting for the desired response. For asyn- 
chronous access, a procedure "Device: I/O" is used. 
This is a means of accessing data which involves wait- 
ing for a response, for example scanning tuner frequen- 
cies to find a multiplex or getting back a table from the 
MPEG stream. When the requested result is available, 
an. event is put in the queue of the engine to signal its 
arrival. A further procedure "Device: Event" provides a 
means of managing unexpected events. 
[0155] In a second embodiment of the receiver/de- 
coder, the lower half of the architecture of the receiver/ 
decoder is replaced by the layers shown in Figure 8. 
[0156] In this embodiment, an extended device layer 
interface (EDLI) 3600 is provided between the virtual 
machine 3500 (not shown) and the device layer inter- 
face 3700, and an abstraction device interface 3800 is 
provided between the device layer interface 3700 and 
the system software/hardware layer 3900. Otherwise, 
like parts are indicated with like reference numerals. 
[0157] The extended device layer interface (EDLI) 
3600 provides a dedicated interface between the virtual 
machine 3500 and the device layer interface 3700 and 
generally provides multithreading support to the device 
layer interface. Functions of the EDLI include routing 
asynchronous events to the appropriate thread in the 
middleware (since the device layer interface need not 
itself support multithreading) and routing messages be- 
tween threads. 

[0158] The abstraction device interface 3800 pro- 
vides a further interface between the device layer inter- 
face 3700 and the device drivers 3910 in the system 



software/hardware layer 3900. By providing such an in- 
terface, the large and complex device layer 3700 can 
be made hardware independent to a greater degree. 

5 Further aspects of system devices 

[01 59] The organisation of software devices within the 
receiver/decoder 2000, and in particular the use of de- 
vice instantiation and logical devices to provide en- 

10 hanced functionality, are described in more detail below. 
A logical demultiplexer device (otherwise referred to as 
a 'DEMUX device 1 ), which advantageously makes use 
of the above-mentioned features of device instantiation 
and logical devices, is then described. 

15 [01 60] Subsequently, the use of the above-mentioned 
DEMUX device for demultiplexing more than one serv- 
ice simultaneously (to allow one demultiplexer to per- 
form the role of two conventional demultiplexers, for ex- 
ample) and for recording more than one service (such 

20 as a digital television programme) simultaneously are 
then described. The provision of a control word device 
and other system aspects for use in managing condi- 
tional access will then be described, and finally there 
follows description of the use of two tuners, particularly 

25 with respect to conditional access data and having a 
close relationship with the above-mentioned DEMUX 
device (s). 

Device instantiation in the context of device 
30 management 

[01 61 ] In the preferred embodiment, the device man- 
ager 371 0 is adapted to instantiate the devices required 
by the receiver/decoder.. This instantiation of software 

35 devices and their detailed structure is now described in 
more detail, with reference to Figure 9. 
[0162] Figure 9 shows two software devices d 0 6000 
and d 1 6002, their respective clients 6004, a device driv- 
er 6006 for the corresponding hardware device class D, 

•to and the corresponding hardware devices D 0 6008 and 
0, 601 0, which form part of the same class 601 2 of de- 
vices (of type D). Also shown is the (software) device 
profile cf 601 4, and the instantiation data 6016, 601 8 for 
each respective device 6000, 6002. As will be described 

^5 in more detail below, the devices 6000, 6002 them- 
selves comprise a portion 6020 corresponding to the de- 
vice profile, and a portion 6022 corresponding to in- 
stance-specific information. It should be noted that the 
principles discussed below in relation to Figure 9 apply 

50 also to any number of software and hardware devices 
other than the two shown. 

[01 63] The devices 6000, 6002 form part of the device 
layer 3700; the device clients typically form part of the 
application layer 3100, API layer 3300, virtual machine 
55 layer 3500 or device layer 3700; and the device driver 
6006 and hardware devices 6008, 6010 form part of the 
system software/hardware layer 3900, all as shown in 
Figures 6, 8 and 9. 
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[0164] In orderto create greater flexibility and efficien- 
cy, each of the 'software devices' referred to elsewhere 
is created by a process of instantiation. In more detail, 
when the receiver/decoder 2000 is initialised or reinitial- 
ised, the device manager 3710 instantiates in turn each 
of the software devices — such as devices d 0 6000 and 
d 1 6002 — by combining a general 'device profile* for 
each required device — such as the device profile d 
6014 — with instance-specific information (which may 
be no more than the instance identifier) — such as in- 
stantiation information 6016 or 6018. 
[0165] In the preferred embodiment, the device profile 
comprises a stand-alone version of the corresponding 
instantiated device, including the necessary interfaces, 
code and data fields, and the process of instantiation 
involves creating a byte-for-byte copy of the device pro- 
file and filling in the relevant data fields with the in- 
stance-specific information. Whilst this results in some 
code duplication, every instance of a particular device 
is then entirely independent from other instances of the 
same or other devices. 

[0166] In variants of the preferred embodiment, the 
device profile again comprises the necessary interfaces 
and code generic to the device type, but the device in- 
stance only comprises the instance-specific data, with 
a set of pointers or other references to the parent profile, 
in these and other variants, calls made through the de- 
vice manager to a specified device instance are routed 
by the device managerto the parent device profile (since 
the device instances in these cases contain only data), 
with the device manager also providing to the device 
profile functions the appropriate instance information, 
typically in the form of a pointer to the data. 
[0167] It should also be noted that in Figure 9 a ge- 
neric device driver 6006 is provided for accessing the 
hardware functions of the devices D; in this case, calls 
to this device driver (as opposed to higher level calls to 
the device manager 371 0) specify the particular one of 
the hardware devices to which the call relates (by sup- 
plying the device instance number as a parameter, for 
example). Depending on the implementation of the de- 
vice layer 3700 and system software/hardware layer 
3900, which can vary widely, separate device drivers 
might instead be provided for each of the hardware de- 
vices 6008, 601 0. 

[01 68] Each class or type of device is allocated a two- 
byte class identifier 6102 which identifies that class of 
device uniquely. Upon instantiation, each device of a 
particular class is allocated a two-byte instance identifi- 
er 6104 which is unique within that class. That is to say 
the first TUNER device may be allocated the same in- 
stance identifier as the first DEMUX device (described 
below); however, no two TUNER devices will have the 
same instance identifier. After instantiation, each device 
is uniquely identified by a compound, four-byte identifier 
6100 (see Figure 10) constructed from the class identi- 
fier 61 02 (forming the lowest two bytes of the compound 
identifier) and the instance identifier 6104 (forming the 



highest two bytes of the identifier). 
[0169] In more detail, the devices 0 could be the tun- 
ers in the receiver/decoder, for example, which, in broad 
terms, are adapted to select for decoding a number of 
5 different transport streams broadcast on different fre- 
quencies. 

[0170] In this case, the hardware devices D 0 and D 1 
would be the two tuners 2016, 2018 shown in Figure 4 
respectively, the software devices d 0 6000 and d 1 6002 

10 would be the two TUNER devices 3724 shown in Fig- 
ures 7 and 8, and the hardware device driver would be 
a tuner device driver (not shown elsewhere), which 
would allow direct communication with the hardware un- 
derlying the two tuners (although as noted above, sep- 

'5 arate device drivers could be provided for each tuner). 
[0171] To illustrate the above . a typical function pro- 
vided by the generic TUNER device (cr) is the 
TUNER_TUNING_SET command, for example, which 
sets various properties of the given tuner, including fre- 

20 quency, signal polarisation, and so on. The 
TUNER_TUNING_SET command is used, for example, 
by the zapping application 3146 mentioned earlier in or- 
der to change channels. In this system, the actual exe- 
cutable code corresponding to the 

25 TUNER_TUNING_SET command is provided in the de- 
vice profile, and is common to all TUNER devices. In- 
formation such as the current frequency of a particular 
tuner instance (such as d 0 ) is contained in the instance- 
specific information for the particular TUNER device 

30 (d 0 ). 

[0172] The device profile 6014 and the instantiation 
data 601 6 : 601 8 will now be further described with ref- 
erence to Figures 11a and 11b. 
[01 73] Figure 1 1 a shows a class description or device 

35 profile 6014 for a device which comprises in a first por- 
tion 6014a the interfaces, code and data fields neces- 
sary for instances of the device class, and two additional 
data fields 601 4b, 601 4c. The first additional field 601 4b 
contains the device identifier 6102; the second 6014c 

<*o contains a value for a maximum number of instances of 
that class of device. The maximum number of instances 
of a particular software device and the maximum total 
number of software device instances is determined by 
constraints of the system software (for example the size 
of the device ID described above), rather than the 
number of underlying hardware devices present in the 
system. 

[0174] Referring to Figure 11b, upon initialisation of 
the receiver/decoder, the physical devices present in the 

50 system become known to the device layer interface, the 
required software devices are instantiated and provided 
with instantiation data 601 6. The instantiation data in- 
cludes the compound four-byte device identifier de- 
scribed above. The instantiation data further comprises 

55 default values and/or possible values or ranges of val- 
ues for procedure parameters, which are determined 
upon initialisation of the receiver/decoder by polling the 
system hardware. 
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[0175] In contrast to the situation shown in Figure 9, 
where there are a plurality of hardware devices and cor- 
responding software devices (such as the two tuners 
and the corresponding TUNER software devices men- 
tioned above), there may be only one software device 
in a given device class (such as for the LCARD smart- 
card reader device, for example). In this case, a device 
profile is still provided, from which a single instance is 
created, as described above. 

[0176] The stored operating system comprises the 
device profiles necessary to create all of the required 
software device instances. As described above, in the 
preferred embodiment, when the operating system is 
booted or rebooted (following a power-on or other reset 
of the receiver/decoder), a special portion of the oper- 
ating system first scans the hardware to detect the at- 
tached hardware devices, and then creates all of the ap- 
propriate software device instances from the stored de- 
vice profiles, before the (re)boot procedure continues. 
Thus,-the instantiation of software devices is static, per- 
formed once every reset. Since the hardware provided 
in the receiver/decoder is also static, this is generally 
perfectly acceptable. 

[0177] ,ln variants of the preferred embodiment: for ex- 
ample where components of the receiver/decoder are 
'hot-swapped', the instantiation of devices is dynamic — 
that is, on demand. In these variants, functions are pro- 
vided as appropriate by the device manager to create 
and delete instances. 

[0178] In the preferred embodiment, different portions 
of the middleware of the receiver/decoder responsible 
for the various devices (such as the HDVR module, for 
example, which is at least in part responsible for the 
mass storage device) add themselves to a list (main- 
tained by the operating system) of processes to be 
called when the devices are to be created. In more de- 
tail, to create all of the instances, the operating system 
calls each of the processes on the list in turn, so each 
process itself creates the necessary device instances 
(using central functions provided by the device manag- 
er) and sets the instance-specific information according- 
ly. 

[01 79] By having each process in charge of given de- 
vices setting the respective instance-specific data, the 
devices can be easily customised. 
[0180] In some cases, as will be described in more 
detail later, a particular functionality offered by a subset 
of a hardware device or a group of hardware devices is 
encapsulated in a single software device, providing a 
'logical' software device without a physical equivalent. 
An example of this would be the demultiplexer device 
('DEMUX' device), which is described later. 
[01 81 ] The communication of devices with one anoth- 
er and with applications under the control of the device 
manager 371 0 is now described in more detail. 
[0182] Each device communicates with an applica- 
tion, or potentially another device, under the control of 
the device manager 3710. The device manager 3710 
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controls access to the devices, declares receipt of an 
unexpected event and manages shared memory. The 
three procedures used by the devices for communica- 
tion with one another and with other parts of the system 
5 (for example, applications) are introduced above. In 
greater detail, these three procedures serve the follow- 
ing purposes: 

[01 83] "Device: Call" procedures are used to give syn- 
chronous commands or effect data transfer. Execution 

10 of an application requesting this procedure is suspend- 
ed during execution of the command or the data transfer. 
This allows operations which must be performed in strict 
sequence to be controlled reliably. 
[01 84] "Device: I/O" procedures provide for asynchro- 

15 nous operation. That is, an application can send a re- 
quest for a data transfer or a particular function to be 
performed by a device, and execution of the requesting 
application continues while the data transfer or function 
is performed. When a requested resull is available, an 

20 event is put in a queue by the device manager 371 0 to 
signal its arrival. 

[0185] "Device: Event" procedures provide a means 
of managing unexpected events, enabling events to be 
signalled to an application by a device. When a device 

25 makes such a call, the device manager 3710 loads an 
event item into a queue. The Event Manager 3546 of 
the virtual machine 3500 extracts event items according 
to a priority level allocated to each event item and inserts 
them into appropriate further queue structures specific 

30 to particular applications in the virtual machine 3500. 
When an application receives an event, it is interrupted 
and responds independently of the code it was execute 
ing at the time an event is signalled. Events may be used 
to notify something which has occurred on an interface, 

35 such as a bus reset, or can be used to notify a result in 
response to an asynchronous command for instance to 
signal completion of a requested data transfer. 
[0186] As a consequence of the device management 
described above, full device instance specific informa- 

40 tion is not required at compile-time; information neces- 
sary in use of the receiver/decoder can be made avail- 
able subsequently, when the device layer interface 3700 
is installed together with a platform such as the system 
software/hardware 3900. 

is [0187] If a particular function of a class of software 
device is not supported by the underlying hardware (that 
is to say that, if a device feature, such as a scan feature 
for a tuner device for example, is not provided in hard- 
ware), instances of that software device will not provide 

50 that function. If none of the functions provided by a class 
of software device are supported by the underlying hard- 
ware, no instances of that device will be instantiated. 
[01 88] As indicated earlier, an important feature is the 
abstraction of functionality from its supporting physical 

55 device(s). Each function can potentially be a complex 
one, involving several physical devices, and a set of 
functions may be related in that they involve an overlap- 
ping set of physical or logical devices. This is dealt with 
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by device instantiation as described generally above. 
One device class can be instantiated with respect to 
more than one function. This is exemplified by the de- 
scription of multiple demultiplexing functions in a receiv- 
er/decoder below, each demultiplexing function having 
its own set of device instances and the device instances 
belonging to overlapping sets of device classes. 

Logical devices 

[01 89] As indicated above, the preferred embodiment 
comprises logical devices. A logical device is one which 
may, but does not necessarily, correspond to a single 
item of underlying hardware. The functionality provided 
by a logical device may for example be a subset of the 
functionality provided by an item of hardware or it may 
be an amalgamation of functionality provided by a 
number of items of hardware. It may include functionality 
provided by the software device itself without the sup- 
port of an item or items of hardware. Furthermore, a log- 
ical device may provide functionality which it accesses 
by making calls to one or more further software devices, 
which may provide that functionality with or without the 
support of an item or items of hardware. 
[0190] The preferred embodiment provides demulti- 
plexing functionality to applications using logical demul- 
tiplexer (DEMUX) devices, which make calls both to 
hardware and to other software devices. 
[01 91 ] A set of software devices is provided in the de- 
vice layer interface 3700 for accessing demultiplexing 
functions of the DDR unit 201 0 in response to a request 
by an application. This set comprises: 

• a DEMUX (logical demultiplexer) device (3762 in 
Figure 12) for extracting packets from a transport 
stream and for coordinating the activities of the oth- 
er devices; 

an MLOAD device 3738 for extracting data sections 
from packets of a transport stream, 

• an MCOM device 3764 for transfer of data sections 
from an transport stream to a communication port, 
including the filtering and manipulation of that data, 

• a CA device 3720 for overseeing conditional access 
operations, 

• a CW device 3760 (further described below) for 
passing control words to descramblers, 

• a TS_REMUX device 3766 for assembling a trans- 
port stream, and 

• a SERVICE device 3736 for overseeing the presen- 
tation of a service to a viewer. 

[0192] In the preferred embodiment, three types of 
logical demultiplexer device are provided (see Figure 
12): 

PLAYER 6220, which is able to play a service (in- 
cluding the extraction of packets from a transport 
stream, descrambling those packets and routing 



them to the correct part of the system for display), 

• RECORDER 6230, which is able to record a service 
(including the extraction of packets from a transport 
stream, the construction of a programme stream 

5 and the routing of that stream to the correct part of 
the system for recording), and 

• PLAYER/RECORDER 6240, which is capable of 
performing the actions of both of the above types of 
demultiplexer device. 

w 

[0193] These three types of logical demultiplexer are 
supported by different subsets 6222, 6232, 6242 of the 
software devices listed above, as can be seen in Figure 
12. The PLAYER logical demultiplexer 6220 does not 
require a TS_REMUX device 3766 since it does not 
need to construct a programme transport stream, and 
the RECORDER logical demultiplexer 6232 does not re- 
quire a SERVICE device 3736 since it is not concerned 
with the presentation of a service to a viewer. 
[0194] In the preferred embodiment, one of each of 
the types of logical demultiplexer is instantiated; and for 
each logical demultiplexer a dedicated one of each of 
the required other software devices listed above is also 
instantiated. 

[0195] When a logical demultiplexer requires func- 
tionality provided by a hardware demultiplexer for ex- 
ample to record a service from an incoming transport 
stream, the logical demultiplexer first notifies the hard- 
ware demultiplexer of the source of the transport stream 
using a DEMUX_SET_SOURCE command. The possi- 
ble sources include one of the tuners (further informa- 
tion regarding the provision of multiple tuners is provid- 
ed below) : the hard disk via a buffer (for example, a 
FIFO), and a port to which an external device is at- 
tached. If the demultiplexer is active in demultiplexing a 
stream from a different source, it notifies the logical de- 
multiplexer device that it is not available to perform the 
requested operation. Otherwise the source of the de- 
multiplexer is set to the indicated source and the re- 
quested operation is performed. The procedure for allo- 
cating a hardware demultiplexer to perform a desired 
demultiplexing operation is further described below. 
[01 96] In a particularly preferred embodiment, the log- 
ical devices comprise one or more identifier identifying 
one or more physical or other software devices which 
implement the functionality offered by the logical device. 
In a further preferred embodiment, a database contain- 
ing data indicating which logical devices uses which oth- 
er device(s) is maintained, for example by the device 
so manager. 

Multiple demultiplexers/remultiplexers 

[0197] In a preferred embodiment, the DDR 2010 
55 comprises two (or, in a particularly preferred embodi- 
ment, three) physical demultiplexers, each capable of 
being set to demultiplex up to 32 PIDs received from a 
distinct source. Moreover, preferred embodiments are 



20 



25 



30 



35 



40 



16 



31 



EP 1 304 871 A2 



32 



able, for example using the logical demultiplexer devic- 
es described above, to use each physical demultiplexer 
to demultiplex more than one service from a particular 
source simultaneously. 

[0198] In order illustrate this feature, the procedure for 
the selection of a physical demultiplexer to perform a 
desired demultiplexing operation will now be described, 
with reference to Figures 13a, b and c, and 14, in the 
context of a receiver/decoder having two physical de- 
multiplexers 6302, 6304. 

[0199] Figures 13a and b show first and second tun- 
ers 2016 and 201 B and (schematically) first and second 
demultiplexers 6302 and 6304. In Figure 13a, the first 
demultiplexer 6302 is active in demultiplexing a service 
being received in a transport stream X 6310 to which 
the first tuner 201 6 is tuned; the first tuner 2016 is there- 
fore set as the source 6250 of the first demultiplexer. 
The following describes the procedure undertaken 
when, under these circumstances, it is desired to de- 
multiplex a service comprising 5 PIDs from a second 
transport stream Y 6320. 

[0200] A logical demultiplexer device (as described 
above) is allocated to oversee the demultiplexing oper- 
ation. The logical demultiplexer then performs the fol- 
lowing procedure, described with reference to Figure 
14. 

[0201] The logical demultiplexer device determines 
(at step 7002) whether any physical demultiplexer is de- 
multiplexing a service from the desired transport stream. 
If so, then it checks (at step 7004) whether that physical 
demultiplexer has sufficient capacity to demultiplex five 
additional PIDs. If the answer is yes again, the logical 
demultiplexer uses that physical demultiplexer to per- 
form the desired operation. 

[0202] In the case of this example, however, no phys- 
ical demultiplexer has the correct source for the desired 
operation (that is, a tuner tuned to transport stream Y). 
Therefore, after step 7002, the logical demultiplexer 
checks (at step 7006) whether any physical demultiplex- 
er is inactive by determining whether any has its source 
disconnected. If no physical demultiplexers are inactive, 
then the logical demultiplexer returns an error (at step 
7008) to the application which requested the demulti- 
plexing operation. However, in the case of this example, 
the source of the second physical demultiplexer is dis- 
connected, and it is therefore available to be used by 
the logical demultiplexer, which switches the source of 
the second physical demultiplexer to the second tuner 
2018, and requests that the second tuner be tuned to 
the frequency of the desired transport stream (in the pre- 
ferred embodiment, by sending a command to a TUNER 
device 3724 as described above). 
[0203] In a second example, commencing with the sit- 
uation shown in Figure 13a, it is desired to demultiplex 
five additional PIDs from transport stream X 6310. In this 
case, at step 7002, it is discovered that the first physical 
demultiplexer 6302 does have the desired source. The 
logical demultiplexer then determines (at step 7004) 



whether the first physical demultiplexer 6302 has suffi- 
cient capacity to demultiplex five additional PIDs; it does 
since it is presently demultiplexing only five PIDs (as 
stated above, each demultiplexer may simultaneously 
5 demultiplex 32 PIDs from a transport stream). The log- 
ical demultiplexer therefore uses the first physical de- 
multiplexer 6302 to perform the desired operation, 
switching its source to the first tuner 201 6, as shown in 
Figure 13c. 

10 [0204] The preferred embodiment also comprises two 
(or more) physical remultiplexers, each capable of con- 
structing, in a known manner, a transport stream for stor- 
age from the demultiplexed packets of a service 
[0205] The embodiment is thus capable of presenting 

15 more than one service simultaneously (for example, in 
a picture-in-picture configuration) or recording more 
than one service simultaneously (upon which subject 
more information is provided below), or recording one 
or more services while presenting one or more different 

20 services, regardless of whether the services being pre- 
sented/recorded are being received on the same or dif- 
ferent transport streams. 

Recording multiple services 

25 

[0206] As indicated above, the preferred embodiment 
is capable of recording more than one service simulta- 
neously. 

[0207] The requirement to do so may arise, for exam- 
30 pie, when a viewer decides to record a first programme 
and a second programme being broadcast at overlap- ^ 
ping times. Alternatively, a viewer may wish to record a 
first programme and time shift a second programme be- 
ing broadcast at the same time as the first. This latter 
35 case will now be described in the context of a preferred 
embodiment, with reference to Figure 15. 
[0208] For the purposes of this discussion, it is pre- 
sumed that the user wishes to watch (and timeshift) pro- 
gramme A being received in transport stream X, having 
40 duration 90 minutes and commencing at 21 hOO; and to 
record programme B being received in transport stream 
Y, having duration 45 minutes and commencing at 
21h30. 

[0209] Having indicated earlier in a known manner 
^5 that programme B is to be recorded, the user indicates 
at 21 hOO that he desires to watch programme A, for ex- 
ample by selecting programme A from an electronic pro- 
gramme guide. A PLAYER/RECORDER logical demul- 
tiplexer device, DEMUX_PLAY_RECORD 6240 (as de- 
50 scribed above), is allocated to the demultiplexing of the 
service forming programme A; DEMUX_PLAY_ 
RECORD determines, using the process described 
above, that the first physical demultiplexer, 
HW_DEMUXJ) 6302, is available to demultiplexer from 
55 a tuner. A first tuner, TUNER_0 2016, is tuned to the 
frequency of transport stream X, and the source of 
HW_DEMUX_0 6302 is set toTUNERJ) 2016usingthe 
DEMUX_SET_SOURCE command. The PIDs of the el- 
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ementary streams belonging to programme A are ob- 
tained from the SI Engine 3540 (described above) and 
passed to HW_DEMUX_0 6302 which commences de- 
multiplexing of those PIDs. The extracted elementary 
stream packets are descrambled (as described below) 5 
and presented to the user in a known manner. 
[0210] At21h30, a RECORDER logical demultiplexer 
device, DEMUX.RECORD 6220, is allocated to the de- 
multiplexing of the service forming programme B. The 
DEMUX_RECORD 6220 determines, as described 10 
above, that HW^DEMUXJ) 6302 is performing a demul- 
tiplexing operation on the transport stream being re- 
ceived in transport stream X, but that a second physical 
demultiplexer, HW_DEMUX_1 6304, is available. A sec- 
ond tuner, TUNER_1 2016, is tuned to the frequency of '5 
transport stream Y, and the source of HW_DEMUX_t 
63041s set to TUNER_1 2016. 
[0211] The PIDs belonging to programme B are de- 
termined as above and passed to HWJDEMUX J 6304 
which commences demultiplexing of those PIDs. The 20 
extracted elementary streams are then remultiplexed 
and stored on the hard disk in a known manner. 
[0212] For the purposes of this discussion we now 
suppose that, at 21 h45, the user decides that he wishes 
to postpone viewing of the remaining 45 minutes of pro- 25 
gramme A, and indicates this by pressing a PAUSE but- 
ton on a remote control. DEMUX_PLAY_RECORD 
6240 ceases the descrambling of the extracted elemen- 
tary streams, causes the SERVICE device 3736 allocat- 
ed to it to freeze the video display on screen and com- 30 
mences the remultiplexing of the elementary streams 
using the TS_REMUX device 3766 allocated to it. The 
remultiplexed stream is stored on the hard disk in a 
known manner. 

[021 3] At 22h00, the user indicates that he wishes to 35 
view the remaining 45 minutes of programme A by 
pressing a resume button on a remote control. A PLAY- 
ER logical demultiplexer, DEMUX_PLAY 6220, is allo- 
cated to the demultiplexing of the stored portion of pro- 
gramme A; DEMUX_PLAY 6220 determines that 40 
HW_DEMUX_0 6302 and HW.DEMUX.J 6304 are not 
available to demultiplex a stream from the hard disk, and 
a third physical demultiplexer, HW_DEMUX_2 (not 
shown), is selected and its source set to the hard disk 
(via a FIFO) in a known manner. The stored portion of 45 
programme A is read, demultiplexed and descrambled 
from the hard disk by DEMUX_PLAY until 22h45, while 
DEMUX_PLAY_RECORD continues to demultiplex and 
remuttiplex programme A from TUNER_0 2016 until 
22h30. DEMUX_RECORD 6230 ceases demultiplexing 50 
and remultiplexing programme B from TUNER_1 2018 
at22h15. 

[0214] If the user decides subsequently to view pro- 
gramme B, DEMUX_PLAY 6220 performs the demulti- 
plexing operations, and so on, as described above. 55 



Control word device 

[0215] In known systems, the control words are ex- 
tracted from the ECMs by the conditional access smart- 
card housed in the card reader and then continue to be 
managed by other items of hardware, that is to say at a 
low level. In embodiments of the invention, the control 
words continue to be extracted from the ECMs by the 
smartcard, but further processing of the conditional ac- 
cess data is handled at a higher level in the architecture. 
[0216] Preferred embodiments comprise a further 
software device, the control word (CW) device 3760, for 
managing descrambling operations performed by the 
descrambler in the DDR 2010. 
[0217] As mentioned above, the Service Information 
(SI) Engine 3540 loads and monitors common Digital 
Video Broadcasting (DVB) or Program System Informa- 
tion Protocol (PSIP) tables and puts them Into a cache. 
Data contained in the tables includes Conditional Ac- 
cess Tables (CATs) from which the PIDs for Entitlement 
Control Messages (ECMs), each containing an encrypt- 
ed control word and access criteria for a programme 
component, can be ascertained. To descramble incom- 
ing programme components, the relevant control words 
need to be loaded to the conditional access smartcard 
(CA smartcard) 2062 where they can be decrypted, us- 
ing the key received in an Entitlement Management 
Message (EMM), and then used in the DDR unit 2010 
for descrambling. 

[0218] The handling of ECMs will now be further de- 
scribed with reference to Figure 16. 
[0219] When a service is to be descrambled, a CA 
kernel 6402 in the middleware (for example, forming 
part of the virtual machine) receives an event from else- 
where in the system (for example, from the Zapping ap- 
plication 3146) identifying the channel upon which the 
service to be descrambled is being received. The CA 
kernel 6402 retrieves from the data cached by the SI 
engine 3540 the PIDs of the ECMs relevant to the serv- 
ice to be descrambled and instructs the MLOAD device 
3738 in the DLI to isolate the ECMs 6420 as they are 
received in the programme data stream. The isolated 
ECMs are then routed by the CA kernel 6402 to the con- 
ditional access smartcard 2062 which operates under 
the control of an LCARD device 3740. The conditional 
access smartcard extracts control words from the ECMs 
in a known manner, if it has the rights to do so, and the 
extracted code words are passed by the CA kernel 6402 
to the Control Word (CW) device 3760 in the DLI. As a 
result, the handling of the control words is not visible at 
a hardware level, resulting in increased security. This 
feature is of particular benefit when using a dedicated 
tuner for the reception of conditional access data, as will 
be described below, since it requires no changes to be 
made to the hardware level. 

[0220] As indicated above, the role of the CW device 
is to manage descrambling operations performed by the 
physical descrambler(s). In the preferred embodiment, 
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the CW device is instantiated, as described above, and 
each instance of the device is a client of the (or one of 
the) descrambter(s). The CW device allocates a de- 
scrambler channel, identified by a descrambler channel 
identifier DESCRJD, to each requested descrambling 
operation for which different access conditions apply 
(that is, requiring the use of different control words). 
[0221] For a particular descrambling operation, the 
CW device is responsible for the following tasks: 

• receiving a request indicating that data is to be de- 
scrambled; 

• allocating a descrambler channel to the descram- 
bling operation; 

• selecting the type of descrambling operation to be 
performed (for example, DVB CS, DES and Triple 
DES); 

• passing the control keys to the descrambler; 

• flushing conlrol keys from a descrambler channel, 
when necessary; and 

• closing a channel when it is no longer required. 

[0222] In addition, the CW device determines the 
maximum number of descrambler channels which can 
be allocated at any time, based on the capabilities of the 
descramblers, and it notifies the CA kernel if a request 
for a descrambling operation cannot be accommodated. 

Multiple tuners 

[0223] The provision of two or more tuners in pre- 
ferred embodiments will be described below after a brief 
review of provisions for conditional access in prior art 
systems. 

[0224] In known systems, an MPEG transport stream 
carries a limited number of audio and video pro- 
grammes, the number being dependent on factors such 
as the degree of data compression, and so on. Admin- 
istrative data, including conditional access data, for all 
of the programmes being broadcast from a head-end is 
inserted into each of the transport streams, so that a 
receiver/decoder is able to determine for which pro- 
grammes the rights to view are held, without tuning to 
each transport stream in turn. This provision of such da- 
ta in each transport stream reduces the bandwidth avail- 
able for content itself, and thus increases the number of 
transport streams, transponders, and so on, necessary 
for the distribution of a bouquet. 
[0225] In a preferred embodiment, a head-end is pro- 
vided which is capable of broadcasting this administra- 
tive data (including conditional access data) in a single 
transport stream only. It is indicated above that a pre- 
ferred embodiment comprises two tuners. In a preferred 
embodiment, one of these tuners (or, in a particularly 
preferred embodiment, an additional tuner) is dedicated 
to the task of receiving this administrative data. 
[0226] In the description above referring to Figures 1 , 
2 and 3, a single multiplexer 1030 is described for con- 



structing a transport stream for broadcast to users over 
a linkage 1022. The multiplexer 1030 in fact represents 
a plurality of multiplexers which construct the plurality 
of transport streams necessary for broadcasting a bou- 
5 quet. The provision of an additional multiplexer for 
broadcasting administrative data in a preferred embod- 
iment is now further described with reference to Figure 
17. 

[0227] In addition to the multiplexers 1 030 : an admin- 

10 istrative data multiplexer 1030' is provided which re- 
ceives the encrypted EMMs from the SAS 5200, en- 
crypted ECMs from the second encrypting unit 51 02, da- 
tastream description tables (for example, the PATs and 
the PMTs), update packets for the CAT table and any 

15 other data of a similar type, which it uses to assemble 
an administrative data transport stream. This transport 
stream has a broadcast route 600' (which may be the 
same as the broadcast routes 600). In this embodiment, 
the administrative data is not inserted into the transport 

20 streams constructed by the multiplexers 1030. 

[0228] When a receiver/decoder is installed at a us- 
er's premises, the frequency of the administrative data 
transport stream is programmed during initialisation. In 
an alternative embodiment, the receiver/decoder is 

25 adapted to scan frequencies for a transport stream iden- 
tifying itself as the administrative data transport stream. 
[0229] In further embodiments, the conditional access 
data is not broadcast (and therefore received) on a ded- 
icated channel, but on a channel which also carries 

30 some programme data. In yet further embodiments, 
channel-hopping is implemented, such that channel up- 
on which the conditional access data is broadcast 
changes. 

[0230] In a preferred embodiment of a receiver/de- 
35 coder intended to be used to receive transport streams 
broadcast by a head-end as described above, there is 
provided a first tuner 201 6 tunable to the administrative 
data transport stream and a second tuner 201 8 (or, in a 
particularly preferred embodiment, second and third 
40 tuners) tunable to transport streams comprising pro- 
gramme data. 

[0231] It will be readily understood that, in order to de- 
multiplex both programme data and administrative data 
simultaneously, the preferred embodiment of receiver/ 

45 decoder must be provided with at least two physical de- 
multiplexers in the DDR unit 2010, a first to filter pro- 
gramme stream PIDs from one transport stream and a 
second to filter the related administrative data PIDs from 
the administrative data transport stream. In fact, as in- 

50 dicated above, a particularly preferred embodiment 
comprises three physical demultiplexers. 
[0232] The precise details of the implementation of 
the various functions described above, and their distri- 
bution between hardware and software, are a matter of 

55 choice for the implementer and will not be described in 
detail. It is, however, noted that dedicated integrated cir- 
cuits capable of performing the operations required in 
the receiver/decoder are commercially available or can 
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be readily designed, and these can be used as the basis 
for a hardware accelerator, or more preferably modified 
to produce a dedicated hardware accelerator, to imple- 
ment various of the operations required, thereby reduc- 
ing the processing power required to run the software. 
However, the operations required may be implemented 
in software if sufficient processing power is available. 
[0233] The modules and other components have 
been described in terms of the features and functions 
provided by each component, together with optional and 
preferable features. With the information given and 
specifications provided, actual implementation of these 
features and the precise details are left to the imple- 
mented As an example, certain modules could be im- 
plemented in software, preferably written in the C pro- 
gramming language and preferably compiled to run on 
the processor used to run the application; however, 
some components may be run on a separate processor, 
and some or ail components may be implemented by 
dedicated hardware. 

[0234] The above modules and components are 
merely illustrative, and the invention may be implement- 
ed in a variety of ways, and, In particular, some compo- 
nents may be combined with others which perform sim- 
ilar functions, or some may be omitted in simplified im- 
plementations. Hardware and software implementa- 
tions of each of the functions may be freely mixed, both 
between components and within a single component. 
[0235] It will be readily understood that the functions 
performed by the hardware, the computer software, and 
such like are performed on or using electrical and like 
signals. Software implementations may be stored in 
ROM, or may be patched in FLASH. 
[0236] It will be understood that the present invention 
has been described above purely by way of example, 
and modification of detail can be made within the scope 
of the invention. 

[0237] Each feature disclosed in the description, and 
(where appropriate) the claims and drawings may be 
provided independently or in any appropriate combina- 
tion. 



Claims 

- 1. A logical device for a receiver/decoder, preferably 
excluding a software device which corresponds to 
a single hardware device. 

2. A logical device according to Claim 1 , comprising 
means for binding the logical device to a further de- 
vice. 

3. A logical device according to Claim 2, wherein the 
binding means is adapted to bind the logical device 
to a plurality of further devices. 

4. A logical device according to Claim 2 or Claim 3, 



wherein the binding means is adapted to bind the 
logical device to a software device. 

5. A logical device according to any of the preceding 
5 claims, adapted to manage a demultiplexing oper- 
ation. 

6. A logical device according to Claim 5, comprising 
means for restricting functionality offered by the de- 

10 vice. 

7. Apparatus for a receiver/decoder, the apparatus be- 
ing provided with at least one function description 
describing a function supported by one or more 

J 5 processes in use of the receiver/decoder, and 
means for loading a value with respect to the or 
each function description for use in said one or more 
processes. 

20 8. Apparatus according to Claim 7 wherein each func- 
tion description comprises a set of one or more data 
fields which together characterise the described 
function in use of the receiver/decoder. 

25 9. Apparatus according to Claim 8 wherein the avail- 
ability of one or more of said processes is deter- 
mined by a value in at least one data field associ- 
ated with that process. 

30 10. Apparatus according to Claim 9 wherein said avail- 
ability is determined by the presence or absence of 
said value in the at least one data field. 

11. Apparatus according to any of Claims 7 to 10, 
35 wherein each process, and thus each function, is 

supported in use by one or more devices, the ap- 
paratus being provided with: 

i) at least one device description in respect of 
40 one or more of said devices; 

ii) means for loading device-specific data with 
respect to said device description; 

iii) means to detect the presence of at least one 
device in the receiver/decoder which supports 

^5 a function described by the function descrip- 

tion; and 

iii) means to load a function identifier for that 
function description as part of a device identifier 
for use in communicating with the at least one 
50 device in use of the receiver/decoder. 

12. Apparatus according to any of Claims 7 to 11, 
wherein the function supported by one or more 
processes comprises a demultiplexing function. 

55 

13. Apparatus according to Claim 12 wherein said 
means for loading a value is adapted to load multi- 
ple values and said multiple values comprise a set 
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of identifiers for input sources of multiplexed sig- 
nals. 

14. Apparatus according to any of Claims 11, 12 or 13 
wherein said means to detect the presence of at 
least one device comprises means to detect the 
presence of each of a plurality of devices in the re- 
ceiver/decoder which together support the function 
described by the function description and said 
means to load the function identifier for that function 
description as part of a device identifier is adapted 
to load the same function identifier as part of the 
device identifier in respect of each of said plurality 
of devices. 

15. Apparatus according to any of Claims 11 to 14 
wherein the apparatus is adapted to modify a func- 
tion description in accordance with devices detect- 
ed. 

16. Apparatus according to any of Claims 11 to 15 
wherein the apparatus is provided with at least two 
different function descriptions and the means to 
load a function identifier is adapted to load a func- 
tion identifier for each of at least two different func- 
tion descriptions to provide at least two different de- 
vice identifiers for use in communicating with a com- 
mon device in use of the receiver/decoder. 

1 7. Apparatus according to any of Claims 7 to 1 6 which 
apparatus comprises control signal management 
means for managing signals for controlling one de- 
multiplexing device to demultiplex at least first and 
second data streams over a common time period. 

1 8. Apparatus according to any of Claims 7 to 1 7 which 
apparatus comprises control signal management 
means for managing signals for controlling one or 
more remultiplexing devices to remultiplex at least 
first and second data streams for recording over a 
common time period. 

19. A computer program product comprising apparatus 
according to any of Claims 7 to 18. 

20. A receiver/decoder comprising apparatus accord- 
ing to any of Claims 7 to 1 8. 

21. A method of operating a receiver/decoder, which 
method comprises creating at least one function de- 
scription describing a function supported by one or 
more processes in use of the receiver/decoder, and 
loading a value with respect to the or each function 
description for use in said one or more processes. 

22. A method according to Claim 21 wherein said load- 
ing is done at first initialisation of the receiver/de- 
coder. 



23. A method of using a receiver/decoder which com- 
prises communicating with at least one device in 
providing a function, wherein a device identifier is 
used in communicating with the at least one device, 

5 which identifier comprises a part associated with 
the function and a part associated with the device. 

24. Apparatus comprising means for instantiating a de- 
vice for a receiver/decoder. 

10 

25. Apparatus according to Claim 24, wherein the in- 
stantiating means comprises means for providing 
generic information and means for providing in- 
stance-specific information to a device being in- 

15 stantiated. 

26. Apparatus according to Claim 24 or Claim 25, 
wherein the instantiating means is adapted to in- 
stantiate a device statically. 

20 

27. Apparatus according to any of the claims 24 to 26, 
wherein the instantiated device is adapted to pro- 
vide functionality to a client. 

25 28. Apparatus according to any of the claims 24 to 27, 
wherein the instantiated device is adapted to pro- 
vide functionality to a plurality of clients. 

29. Apparatus according to any of the claims 24 to 27, 
30 wherein the instantiated device is capable of asyn- 
chronous communication. 

30. Apparatus according to any of the claims 24 to 29; 
comprising means for receiving information relating 

35 to a new type of device to be instantiated. 

31. Apparatus according to any of the claims 24 to 30, 
comprising means for determining a hardware en- 
vironment. 

40 

32. Apparatus according to any of the preceding claims, 
wherein the instantiated device is a logical device 
as claimed in any of claims 1 to 6. 

45 33. Apparatus for a receiver/decoder, the apparatus be- 
ing provided with at least one device description 
and means for loading device-specific data with re- 
spect to said device description. 

50 34. Apparatus according to Claim 33 wherein said 
means for loading device-specific data is adapted 
to load at least one value with respect to one or 
more device descriptions, said value comprising at 
least part of a device identifier for use in communi- 

55 eating with a device in use of the receiver/decoder. 

35. Apparatus according to Claim 33 or 34, further com- 
prising means for loading device-specific data with 
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respect to more than one respective copy of at least 
one of the device descriptions. 

36. Apparatus according to Claim 35 wherein a value 
loaded to each device instance as device-specific 
data comprises at least part of a device identifier 
and is different from any value loaded as at least 
part of a device identifier to another copy of the 
same device description. 

37. Apparatus according to any of Claims 34 to 36 
wherein, in use of the receiver/decoder to provide 
a function, more than one different device is used 
to provide said function, wherein each device de- 
scription with at least one value loaded provides a 
device instance, and wherein said at least part of a 
device identifier is common to at least one device 
instance for each of at least two different devices 
used lo provide said function. 

38. Apparatus according to any of the claims 33 to 37, 
wherein a value which can alternatively or addition- 
ally be loaded to one or more device descriptions 
as device-specif ic data comprises at least one val- 
ue for a parameter of a procedure supported by a 
device to which the description relates. 

39. Apparatus according to Claim 38 wherein said at 
least one value for a parameter of a procedure com- 
prises an identifier for an authorised input to the de- 
vice to which the description relates. 

40. Apparatus according to Claim 39 wherein the de- 
vice to which the description relates comprises a 
demultiplexing device. 

41. Apparatus according to any of Claims 35 to 40, fur- 
ther comprising limiting means for limiting the 
number of copies of one or more device descrip- 
tions to a preset maximum. 

42. Apparatus according to Claims 33 to 41 , the appa- 
ratus being provided with at least one function de- 
scription describing a function supported by one or 
more processes in use of the receiver/decoder, and 
means for loading a value with respect to the or 
each function description for use in said one or more 
processes. 

43. A method of using a receiver/decoder to provide a 
function, which method comprises selecting an 
identifier for a device from at least two different iden- 
tifiers available for that device and using the select- 
ed identifier in relation to communications with the 
device to provide the function. 

44. A method of using a receiver/decoder to provide a 
function, which method comprises communicating 



with at least two different devices used in providing 
the function, using a different respective identifier in 
relation to communication with each of said two dif- 
ferent devices, wherein said different respective 
5 identifiers share a common portion. 

45. Apparatus for processing data, comprising means 
for operating a demultiplexer to demultiplex a plu- 
rality of services simultaneously. 

10 

46. Apparatus according to Claim 1 , wherein the demul- 
tiplexer operating means comprises means for al- 
locating a respective togical demultiplexer as 
claimed in any of claims 1 to 6 to each service to be 

15 demultiplexed. 

47. Apparatus for controlling a demultiplexing process 
in a receiver/decoder, which apparatus comprises 
control signal management means for managing 

20 signals for controlling one demultiplexing device to 
demultiplex at least first and second data streams 
over a common time period. 

48. Apparatus according to Claim 47, wherein saidcon- 
25 trol signal management means is adapted to main- 
tain a first family of devices for use together in con- 
trolling the demultiplexing device to demultiplex 
said first data stream, and to maintain a second 
family of devices for use together in controlling the 

30 demultiplexing device to demultiplex said second 
data stream. 

49. Apparatus according to Claim 48 wherein the de- 
vices of each family are each allocated an identifier 

35 which has at least a common portion for ail the de- 
vices of a family, said common portion for the first 
family being different from said common portion for 
the second family, for use in co-ordinating process- 
es performed by the devices of each family in con- 
40 trolling the demultiplexing device to demultiplex a 
respective data stream. 

50. Apparatus according to any of Claims 47 to 49, fur- 
ther comprising at least one remultiplexing device 

45 for remultiplexing each of said at least two data 
streams for recording. 

51 . Apparatus for a receiver/decoder, comprising appa- 
ratus according to any of Claims 47 to 50, which 

50 apparatus for a receiver/decoder further comprises 
at least two inputs for connection to respective 
channels and correlation means for correlating a 
signal received at a first of said inputs with a signal 
received at a second of said inputs. 

55 

52. A method of controlling a demultiplexing process in 
a receiver/decoder, which method comprises send- 
ing one or more control signals to one demultiplex- 
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ing device, which control signal(s) identify at least' 
first and second data streams to be demultiplexed 
over a common time period. 

53. A method according to Claim 52 which further com- 
prises maintaining a first family of devices for use 
together in controlling the demultiplexing device to 
demultiplex said first data stream, and maintaining 
a second family of devices for use together in con- 
trolling the demultiplexing device to demultiplex 
said second data stream. 

54. A method according to Claim 52 which further com- 
prises allocating an identifier to each device of each 
family, which identifier has at least a common por- 
tion for all the devices of a family, said common por- 
tion for the first family being different from said com- 
mon portion for the second family, for use in co-or- 
dinating processes performed by the devices of 
each family in controlling the demultiplexing device 
to demultiplex a respective data stream. 

55. A control word device for managing a descrambling 
operation, the device being implemented in soft- 
ware. 

56. Apparatus for a receiver/decoder comprising an in- 
terface for use in controlling descrambling equip- 
ment to descramble signals. 

57. Apparatus according to Claim 56 further comprising 
means to assign an identifier to an instance of use 
of the descrambling equipment to descramble a sig- 
nal, which identifier is used in controlling the de- 
scrambling equipment in relation to that instance of 
use by means of the interface. 

58. Apparatus according to Claim 57 wherein the 
means to assign an identifier comprises means to 
assign more than one identifier to the descrambling 
equipment over the same time period, each identi- 
fier being for use in controlling the descrambling 
equipment with respect to a respective instance of 
use of the descrambling equipment. 

59. Apparatus according to Claim 58 wherein at least 
first and second instances of use of the descram- 
bling equipment are subject to at least one different 
respective access condition for descrambling sig- 
nals. 

60. Apparatus according to any of Claims 57 to 59 
wherein the apparatus is arranged to control supply 
of a decryption key to the descrambling equipment 
for use in a respective descrambling process. 

61 . Apparatus according to Claim 60 wherein the appa- 
ratus is arranged to coordinate supply of a decryp- 



tion key, from means for receiving delivery of de- 
cryption keys, to the descrambling equipment, said 
co-ordination being done by use of the identifier as- 
signed to each respective instance of use of the de- 
5 scrambling equipment. 

62. Apparatus according to Claim 61 wherein the de- 
cryption key is received in a multiplexed information 
signal. 

10 

63. Apparatus according to any of Claims 56 to 62 
wherein the interface is accessible to at least one 
device in a family of devices supporting a demulti- 
plexing function. 

15 

64. Apparatus according to Claims 57 and 63 further 
comprising means to provide more than one in- 
stance of the same device in the family of devices, 
each instance so provided being related to at least 

20 one assigned identifier for an instance of use of the 
descrambling equipment. 

65. Apparatus according to any of Claims 56 to 64, fur- 
ther comprising recording means for recording two 

25 or more programme data streams over a common 
time period. 

66. A method of descrambling scrambled signals which 
method comprises the use of an interface in the 

30 control of descrambling equipment. 

67. A method according to Claim 66 further comprising 
the steps of: 

35 i) assigning an identifier to an instance of use 

of the descrambling equipment; and 
ii) using the identifier in controlling the de- 
scrambling equipment in relation to' said in- 
stance of use by means of the interface. 

40 

68. A method according to Claim 67 which comprises 
assigning a first identifier to a first instance of use 
of the descrambling equipment, assigning a second 
identifier to a second instance of use of the de- 

45 scrambling equipment, and using the first and sec- 
ond identifiers to distinguish the first and second In- 
stances of use in controlling the descrambling 
equipment, said first and second instances of use 
occurring over a common time period. 

50 

69. A method according to Claim 68 wherein said first 
and second instances of use of the descrambling 
equipment are subject to at least one different re- 
spective access condition for descrambling. 

55 

70. Apparatus for processing data, comprising means 
for recording a first service, means for simultane- 
ously recording a second service and means for 
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playing back the first service and the second service 
at respective times chosen by a user. 

71. Apparatus for a receiver/decoder comprising re- 
cording means for recording two or more pro- 
gramme data streams over a common time period. 

72. A method of recording programme signals which 
method comprises recording two or more different 
programme data streams over a common time pe- 
riod. 

73. Apparatus for processing data, comprising means 
for receiving service data on a first channel and 
means for receiving conditional access data relat- 
ing to that service on a second channel. 

74. Apparatus according to Claim 73 : comprising 
means for causing the conditional access data re- 
ceiving means to change the channel from which it 
receives the conditional access data. 

75. A broadcast centre comprising service data broad- 
casting means adapted to broadcast service data 
excluding conditional access data on a first chan- 
nel, and conditional access data broadcasting 
means for broadcasting conditional access data re- 
lating to the service on a second channel. 

76. A broadcast centre according to Claim 75, compris- 
ing means for causing the conditional access data 
broadcasting means to change the channel upon 
which the conditional access data is broadcast. 

77. A conditional access system comprising service da- 
ta broadcasting means for broadcasting service da- 
ta excluding conditional access data on a first chan- 
nel, conditional access data broadcasting means 
for broadcasting conditional access data relating to 
the service on a second channel, service data re- 
ceiving means for receiving the service data and 
conditional access data receiving means for receiv- 
ing the conditional access data. 

78. Apparatus for a receiver/decoder, for use in receiv- 
ing and/or decoding signals received at the appa- 
ratus over more than one channel, wherein said ap- 
paratus comprises at least two inputs for connection 
to respective channels and correlation means for 
correlating a signal received at a first of said inputs 
with a signal received at a second of said inputs. 

79. Apparatus according to Claim 78 further comprising 
detection means for detecting a channel identifier 
received in the signal at the first input, channel se- 
lection means for selecting a channel for connection 
to said second input, and control means to control 
the channel selection means to select a channel 



identified by the channel identifier for connection to 
said second input. 

80. Apparatus according to either of Claims 78 or 79 
5 wherein each respective channel has a different 

carrier frequency. 

81. Apparatus according to any of Claims 78 to 80 
wherein the signal received at the first input com- 

10 prises at least primarily content data and the signal 
received at the second input comprises administra- 
tive data with respect to the content data. 

82. Apparatus according to any of Claims 78 to 81 , fur- 
's ther comprising an interface for use in controlling 

descrambling equipment to descramble information 
signals. 

83. A broadcast system for broadcasting related sig- 
20 nals in multiplexed signal transport streams, which 

comprises broadcast means for broadcasting a first 
signal in a first multiplexed signal transport stream, 
broadcast means for broadcasting a second signal 
in a second multiplexed signal transport stream, 
25 and correlation signal transmission means for 
transmitting a correlation signal for use in correlat- 
ing the related signals. 

84. A broadcast system according to Claim 83 wherein 
30 the correlation signal comprises carrier frequency 

data for identifying a carrier frequency for at least 
one of the first and second transport streams. 

85. A broadcast system according to either of Claims 
35 83 or 84 wherein the correlation signal comprises 

at least one slot identifier for identifying a slot in one 
of the first and second transport streams. 
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